VYPR
← All advisories
High severity7.7NVD Advisory· Published Feb 10, 2026· Updated Jun 17, 2026

CVE-2026-23689

CVE-2026-23689

Description

Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution that consumes excessive system resources, potentially rendering the system unavailable. Successful exploitation results in a denial-of-service condition that impacts availability, while confidentiality and integrity remain unaffected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • SAP/Advanced Planning And Optimization2 versions
    cpe:2.3:a:sap:advanced_planning_and_optimization:713:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:advanced_planning_and_optimization:713:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:advanced_planning_and_optimization:714:*:*:*:*:*:*:*
  • SAP/Supply Chain Management4 versions
    cpe:2.3:a:sap:supply_chain_management:700:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:supply_chain_management:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supply_chain_management:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supply_chain_management:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supply_chain_management:712:*:*:*:*:*:*:*
  • SAP/SAPllm-fuzzy
  • SAP/Sap Supply Chain Managementv5
    Range: SCMAPO 713

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.