Search: CVE-2026-40128

CVE-2026-40128 is a critical path traversal vulnerability in SAP NetWeaver Application Server Java (Web Container). It allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters. This manipulation enables the attacker to traverse directories and process arbitrary files on the local system. Successful exploitation could lead to viewing or modifying sensitive information or causing denial of service by making parts of the system unavailable.