{"id":"CVE-2026-109796","kind":"vulnerability","aliases":["CVE-2026-109796"],"related":[],"title":"SAP NetWeaver ABAP: uninitialized memory can leak to low-privileged users","description":"SAP NetWeaver Application Server ABAP and ABAP Platform does not properly initialize memory in certain internal components. Under certain condition, an attacker with low privileges could disclose uninitialized memory contents under specific conditions. This results in a low impact on confidentiality. There is no impact on integrity and availability.","summary":"SAP NetWeaver Application Server ABAP and ABAP Platform fail to initialize memory in certain internal components. An attacker with low privileges can read uninitialized memory contents under specific conditions, exposing limited data.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["abap","netweaver","sap","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T01:17:13+00:00","first_seen_at":"2026-11-10T01:26:36+00:00","triaged_at":"2026-11-10T01:29:01+00:00","updated_at":"2026-11-10T01:29:01+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T01:29:01Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"SAP NetWeaver ABAP: uninitialized memory can leak to low-privileged users","impact":"low","summary":"SAP NetWeaver Application Server ABAP and ABAP Platform fail to initialize memory in certain internal components. An attacker with low privileges can read uninitialized memory contents under specific conditions, exposing limited data.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["sap","netweaver","abap"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"low-privileged user reads limited uninitialized memory contents","analyst_note":"Check SAP Security Notes for CVE-2026-109796 for affected releases, patch level and the specific trigger conditions.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running SAP NetWeaver Application Server ABAP or ABAP Platform. The sources do not describe the specific conditions or components that trigger the leak, so the exact exposure is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000672,"input_tokens":4560,"output_tokens":432,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-109796':15A,18A '-2026':14A,17A 'abap':3A,19B,27B,29B,59C,61C 'applic':25B,57C 'attack':40B,76C 'avail':103C 'certain':36B,69C,73C 'compon':38B,71C 'condit':51B,74C,87C 'confidenti':95C 'content':48B,84C 'could':80C 'cve':13A,16A 'data':54B 'disclos':81C 'expos':52B 'fail':31B 'impact':93C,99C 'initi':33B,66C 'integr':101C 'intern':37B,70C 'leak':7A 'limit':53B 'low':10A,42B,78C,92C 'low-privileg':9A 'memori':5A,34B,47B,67C,83C 'netweav':2A,20B,24B,56C 'platform':30B,62C 'privileg':11A,43B,79C 'proper':65C 'read':45B 'result':89C 'sap':1A,21B,23B,55C 'server':26B,58C 'specif':50B,86C 'uniniti':4A,46B,82C 'user':12A 'vendor':22B","nicknames":[],"mitigations":[],"who_affected":"Organizations running SAP NetWeaver Application Server ABAP or ABAP Platform. The sources do not describe the specific conditions or components that trigger the leak, so the exact exposure is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["abap","medium","netweaver","sap","vendor"],"campaign_type":null,"search_a":"'-109796':15A,18A '-2026':14A,17A 'abap':3A 'cve':13A,16A 'leak':7A 'low':10A 'low-privileg':9A 'memori':5A 'netweav':2A 'privileg':11A 'sap':1A 'uniniti':4A 'user':12A","search_b":"'abap':19B,27B,29B 'applic':25B 'attack':40B 'certain':36B 'compon':38B 'condit':51B 'content':48B 'data':54B 'expos':52B 'fail':31B 'initi':33B 'intern':37B 'limit':53B 'low':42B 'memori':34B,47B 'netweav':20B,24B 'platform':30B 'privileg':43B 'read':45B 'sap':21B,23B 'server':26B 'specif':50B 'uniniti':46B 'vendor':22B","search_c":"'abap':59C,61C 'applic':57C 'attack':76C 'avail':103C 'certain':69C,73C 'compon':71C 'condit':74C,87C 'confidenti':95C 'content':84C 'could':80C 'disclos':81C 'impact':93C,99C 'initi':66C 'integr':101C 'intern':70C 'low':78C,92C 'memori':67C,83C 'netweav':56C 'platform':62C 'privileg':79C 'proper':65C 'result':89C 'sap':55C 'server':58C 'specif':86C 'uniniti':82C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T01:17:13+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"cna@sap.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-109796","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109796","severity":null,"published_at":"2026-11-10T01:17:13+00:00","modified_at":"2026-11-10T01:17:13+00:00","first_seen_at":"2026-11-10T01:26:36+00:00","fetched_at":"2026-11-10T01:26:36+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}