Is CVE-2026-58249 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-58249?

CVE-2026-58249 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-58249

Description

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful exploitation can therefore result in a high impact on the availability of the affected application. There is no impact on the confidentiality or integrity of the application.