VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Feb 10, 2026· Updated Jun 17, 2026

CVE-2026-23684

CVE-2026-23684

Description

A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being created with erroneous product value which could be checked out. This leads to high impact on data integrity, with no impact on data confidentiality or availability of the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • SAP/Commerce Cloud4 versions
    cpe:2.3:a:sap:commerce_cloud:2205:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:commerce_cloud:2205:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:commerce_cloud:2211:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: HY_COM 2205

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.