MEDIUM 4.3 NVD

CVE-2026-109796

SAP NetWeaver Application Server ABAP and ABAP Platform does not properly initialize memory in certain internal components. Under certain condition, an attacker

SAP NetWeaver Application Server ABAP and ABAP Platform does not properly initialize memory in certain internal components. Under certain condition, an attacker with low privileges could disclose uninitialized memory contents under specific conditions. This results in a low impact on confidentiality. There is no impact on integrity and availability.

References

https://me.sap.com/notes/3769130
https://url.sap/sapsecuritypatchday

Published: 2026-11-10 · Source: NVD · Feed updated: 2026-11-10

This medium severity vulnerability with a CVSS score of 4.3 was published on 2026-11-10 via NVD.

vulnfeed aggregates 17092 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.