PT-2026-7219 · Sap · Sap Netweaver+1

Published 2026-02-10 · Updated 2026-02-10 · CVE-2026-24320

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP NetWeaver and ABAP Platform (affected versions not specified)

Description An authenticated attacker could exploit logical errors in memory management within the software by providing specially crafted input containing unique characters that are improperly converted. This improper memory management may lead to memory corruption and potential leakage of memory content. Successful exploitation may have a limited impact on the confidentiality of the application, with no effect on its integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-113

CWE-787

Related Identifiers

CVE-2026-24320

Affected Products

Abap Platform

Sap Netweaver

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-24320 · Security Note
• https://osv.dev/vulnerability/CVE-2026-24320 · Vendor Advisory
• https://url.sap/sapsecuritypatchday · Vendor Advisory
• https://me.sap.com/notes/3678313 · Note
• https://twitter.com/VulmonFeeds/status/2021232197701710132 · Twitter Post