SAP NETWEAVER APPLICATION SERVER · CVE-2026-120010 · Runtime
NO FIX YET · SEE WHAT TO DO
SAP NetWeaver Application Server's Message Server mishandles memory sizing on certain HTTP requests, causing a heap buffer overflow. An unauthenticated attacker can make the component abort and stay down until the framework restarts it, with no stated impact on confidentiality or integrity.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
SAP NetWeaver AS ABAP/Java systems that run the Message Server on the kernel releases listed in the CVE record (unconfirmed, from a mirror). An unauthenticated attacker with network access to the Message Server's HTTP port can crash it with one request. It stays down until restarted, which can disrupt logon and load balancing in distributed landscapes. No confidentiality or integrity impact is stated. Systems where the Message Server HTTP port is only reachable from a trusted internal network face less exposure.
Not affected if network-restricted-message-server, unknown
Who cares dos, sap-kernel, sap-message-server, sap-netweaver, unauthenticated
disp+work -V)Posts are quoted with a link to the original. They are data to us, never instructions.
SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain HTTP requests. An unauthenticated attacker could send a specially crafted request to trigger a heap buffer overflow in affected functionality. Successful exploitation causes the component to abort and remain unavailable until it is restarted by the framework, resulting in a high impact on availability of the system. There is no impact on confidentiality and integrity of the application.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Apply SAP Security Note 3805570 (https://me.sap.com/notes/3805570); fixed kernel patch levels are not readable without an SAP login.