CVE-2026-58249
Received Received - Intake

Memory Corruption in SAP NetWeaver and Web Dispatcher

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: SAP SE

Description
SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful exploitation can therefore result in a high impact on the availability of the affected application. There is no impact on the confidentiality or integrity of the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-58249
EUVD
EUVD-2026-98184

Affected Vendors & Products

Showing 14 associated CPEs
Vendor Product Version / Range
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) HDB 2.00
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) KRNL64UC 7.53
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) WEBDISP 7.53
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) 7.54
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) 7.77
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) 7.93
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) 9.16
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) XS_ADVANCED_RUNTIME 1.00
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) SAP_EXTENDED_APP_SERVICES 1
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) CONTSERV 7.53
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) KERNEL 7.53
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) 9.18
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) 9.19
SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) 9.20

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-191 The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects SAP NetWeaver and SAP Web Dispatcher. It involves improper validation of certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could exploit this to send a malicious request, causing a memory-handling error that crashes the affected process. This leads to a high impact on the availability of the application without affecting confidentiality or integrity.

Detection Guidance

Detecting this vulnerability requires monitoring for crashes in SAP NetWeaver or SAP Web Dispatcher processes due to memory-handling errors. Check application logs for unexpected terminations of the Internet Communication Manager (ICM) component. Use SAP diagnostic tools like SAPControl or ST03N to monitor system stability and identify crashes. Network traffic analysis may reveal malformed requests targeting the vulnerable protocol component.

Impact Analysis

The vulnerability can cause the affected SAP application to crash, resulting in downtime and disrupting business operations. Since it requires no authentication, any external attacker could exploit it remotely. The primary impact is reduced system availability, which may lead to service interruptions for users and potential financial losses.

Compliance Impact

This vulnerability primarily impacts availability, which could lead to service disruptions. For GDPR, repeated downtime might affect data processing timelines. For HIPAA, it could disrupt access to protected health information. However, since confidentiality and integrity are not compromised, direct compliance violations may be limited unless availability requirements are explicitly defined in these regulations.

Mitigation Strategies

Apply the latest SAP security notes and patches immediately, particularly SAP Note 3765424. Restrict network access to SAP systems by blocking unnecessary ports or using firewalls. Monitor affected systems closely for crashes or unusual activity. Consider temporarily disabling the vulnerable protocol component if a patch is not immediately available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58249. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart