CVE-2026-24309

Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify or insert entries into the database configuration table of the ABAP system. This unauthorized content change could lead to reduced system performance or interruptions. The vulnerability has low impact on the application's integrity and availability, with no effect on confidentiality.

• CWE-862

• https://me.sap.com/notes/3703856Permissions Required
• https://url.sap/sapsecuritypatchdayVendor Advisory

Published

Mar 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-24303Improper access control in Microsoft Partner Center allows a…9.6
• CVE-2026-24304Improper access control in Azure Resource Manager allows an …9.9
• CVE-2026-24305Azure Entra ID Elevation of Privilege Vulnerability9.8
• CVE-2026-24306Improper access control in Azure Front Door (AFD) allows an …9.8
• CVE-2026-24307Improper validation of specified type of input in M365 Copil…7.5
• CVE-2026-24308Improper handling of configuration values in ZKConfig in Apa…7.5
• CVE-2026-2431The CM Custom Reports plugin for WordPress is vulnerable to …6.1
• CVE-2026-24310Due to missing authorization check in SAP NetWeaver Applicat…4.3
• CVE-2026-24311The SAP Customer Checkout application exhibits certain desig…5.6
• CVE-2026-24312An erroneous authorization check in SAP Business Workflow le…5.2
• CVE-2026-24313SAP Solution Tools Plug-In (ST-PI) contains a function modul…5
• CVE-2026-24314Under certain conditions SAP S/4HANA (Manage Payment Media) …4.3