---
id: "CVE-2026-109802"
page: "https://infrastack.ai/live/CVE-2026-109802"
kind: "vulnerability"
aliases: ["CVE-2026-109802"]
title: "SAP NetWeaver ABAP: crafted input crashes work process, system unavailable"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["abap", "netweaver", "sap", "vendor"]
not_affected_if: ["no-authenticated-users", "no-sap-netweaver-abap"]
published_at: "2026-11-10T01:17:14+00:00"
first_seen_at: "2026-11-10T01:26:37+00:00"
updated_at: "2026-11-10T01:28:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109802", "first_seen_at": "2026-11-10T01:26:37+00:00"}]
exploit_sources: []
---

# SAP NetWeaver ABAP: crafted input crashes work process, system unavailable

Link for people: https://infrastack.ai/live/CVE-2026-109802 (this .md is for agents)

SAP NetWeaver Application Server for ABAP does not validate certain input values properly. An authenticated user can send crafted requests that crash the affected work process and make the system unavailable.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T01:26:37+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-109802

## From the sources

SAP NetWeaver Application Server for ABAP does not properly validate certain input values. An authenticated user could send specially crafted requests to trigger an error in internal processing. This could crash the affected work process and make the system unavailable. This results in a high impact on availability with no impact on confidentiality and integrity.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_