CVE-2026-24326

MEDIUM 4.3CVE-2026-24326 · Published 10/02/2026 · updated 17/06/2026

In short

CVE-2026-24326 is a MEDIUM (CVSS 4.3) vulnerability affecting s/4hana defense & security (sap).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 13.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
s/4hana defense & security sap	`= 600= 603= 604= 605= 606= 616= 617= 618= 619= 800= 801= 802= 803= 804= 805= 806= 807= 808= 809`	No fix yet

Description

Due to a missing authorization check in the Disconnected Operations of the SAP S/4HANA Defense & Security, an attacker with user privileges could call remote-enabled function modules to do direct update on standard SAP database table . This results in low impact on integrity, with no impact on confidentiality or availability of the application.

References

me.sap.com/notes/3678009 · Permissions Required
url.sap/sapsecuritypatchday · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free