Search: CVE-2026-89126

CVE-2026-89126 is a critical heap-based buffer overflow vulnerability in SAP Web Dispatcher. It arises from insufficient validation of certain network input by an internal component. An unauthenticated attacker can exploit this flaw by sending specially crafted network traffic, potentially leading to arbitrary code execution and full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected system.