SAP Note 3765424
Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)
HighCVSS 7.5SAP NetWeaver and SAP Web Dispatcher
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2026-58249
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products and versions
- Product SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)
Versions: HDB 2.00, KRNL64UC 7.53, WEBDISP 7.53, 7.54, 7.77, 7.93, 9.16, XS_ADVANCED_RUNTIME 1.00, SAP_EXTENDED_APP_SERVICES 1, CONTSERV 7.53, KERNEL 7.53, 9.18, 9.19, 9.20
Appears in
Patch Days listing this note, newest first.
- October 2026HighCVSS 7.5