medium · CVSS v3 6.5

CVE-2026-109801

SAP NetWeaver Application Server Java (NWDI Cockpit) has an authorization bypass that allows low‑privilege users to retrieve sensitive data

Overview

SAP NetWeaver Application Server Java (NWDI Cockpit) has an authorization bypass that allows low‑privilege users to retrieve sensitive data from other users. This flaw can expose confidential information without affecting integrity or availability. Defenders should ensure the latest patch is applied and review access controls.

Description

SAP NetWeaver Application Server Java (NWDI Cockpit)� does not perform sufficient authorization checks for certain functionality that retrieves sensitive information. An attacker with low privileges could send a specially crafted request to access sensitive information belonging to other system users. Successful exploitation results in a high impact on confidentiality, with no impact on integrity or availability of the application.

Impact

Confidentiality is compromised for all users whose data can be accessed by lower‑privileged accounts. Integrity and availability remain unaffected. The attack can be executed by any authenticated user with minimal privileges, potentially exposing sensitive business data.

Remediation

Apply SAP security patch for CVE-2026-109801. Verify that role‑based access controls restrict access to the affected functionality. If the patch is not yet available, disable the NWDI Cockpit or restrict its usage to privileged accounts.

Risk context

The flaw is rated medium severity with a CVSS v3 score of 6.5. While it does not affect availability, the confidentiality impact warrants timely patching. Monitor for any related advisory updates.

Affected products

  • SAP NetWeaver Application Server Java
  • SAP NWDI Cockpit

Scores

Severity
medium
CVSS v2
6.8
CVSS v3
6.5
CVSS v4
—
EPSS
—

authorization-bypass confidentiality SAP NetWeaver NWDI patch access-control

← All CVEs

Related CVEs

medium

CVE-2026-125375

MrDoc through 1.1.1 contains a missing authorization vulnerability in the project_doc_sort and manage_project_doc_sort handlers that allows registered users to modify other users' documents by supplying arbitrary document IDs in sort_data. Attackers owning any project can reparent and reorder documents by sequential ID and set their status to draft or removed, hiding published documents.

View analysis

medium

CVE-2026-117477

KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL.

View analysis

medium

CVE-2026-125077

A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

View analysis

medium

CVE-2026-125357

Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handle_request that allows unauthenticated attackers to read files outside the static directory. Attackers can request /static/../ to bypass the '/../' substring check and read munin.conf and plugin-conf.d files containing monitored service credentials.

View analysis