PT-2026-7219 · Sap · Sap Netweaver+1

CVE-2026-24320 · Publicado 2026-02-10 · Atualizado 2026-02-10

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Baixa

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP NetWeaver and ABAP Platform (affected versions not specified)

Description An authenticated attacker could exploit logical errors in memory management within the software by providing specially crafted input containing unique characters that are improperly converted. This improper memory management may lead to memory corruption and potential leakage of memory content. Successful exploitation may have a limited impact on the confidentiality of the application, with no effect on its integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Enumeração de Fraquezas

CWE-113

CWE-787

Identificadores relacionados

CVE-2026-24320

Produtos afetados

Abap Platform

Sap Netweaver

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-24320 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-24320 · Aviso do Fabricante
• https://me.sap.com/notes/3678313 · Nota
• https://url.sap/sapsecuritypatchday · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2021232197701710132 · Publicação no Twitter