by Kastro
Paper/Archive/CVE-2026-109803

CVE-2026-109803

SAP_SE SAP NetWeaver Knowledge Management (XML Forms) — Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms)

CVSS 9.9
critical.is priorityof 100
30
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be processed, potentially leading to arbitrary code execution in the application context. Successful exploitation could impact the confidentiality, integrity, and availability of the application.

Affected

ProductAffectedFixed inSource
SAP NetWeaver Knowledge Management (XML Forms)KMC-CM 7.50–CNA

Scores by source

sap (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

refme.sap.com/notes/3809153refurl.sap/sapsecuritypatchday