1. Home
  2. CVE Database
  3. CVE-2026-24326
MEDIUM · 4.3

CVE-2026-24326

Due to a missing authorization check in the Disconnected Operations of the SAP S/4HANA Defense & Security, an attacker with user privileges could call remote-enabled function modules to do direct upda...

Vulnerability Description

Due to a missing authorization check in the Disconnected Operations of the SAP S/4HANA Defense & Security, an attacker with user privileges could call remote-enabled function modules to do direct update on standard SAP database table . This results in low impact on integrity, with no impact on confidentiality or availability of the application.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
SapS\/4Hana Defense \& Security600

Related Weaknesses (CWE)

CWE-862

References

FAQ

What is CVE-2026-24326?

CVE-2026-24326 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Due to a missing authorization check in the Disconnected Operations of the SAP S/4HANA Defense & Security, an attacker with user privileges could call remote-enabled function modules to do direct upda...

How severe is CVE-2026-24326?

CVE-2026-24326 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-24326?

Check the references section above for vendor advisories and patch information. Affected products include: Sap S\/4Hana Defense \& Security.