VYPR
← All advisories
Low severity3.1NVD Advisory· Published Feb 10, 2026· Updated Jun 17, 2026

CVE-2026-24320

CVE-2026-24320

Description

Due to improper memory management in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker could exploit logical errors in memory management by supplying specially crafted input containing unique characters, which are improperly converted. This may result in memory corruption and the potential leakage of memory content. Successful exploitation of this vulnerability would have a low impact on the confidentiality of the application, with no effect on its integrity or availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • SAP/Netweaver As Abap Kernel8 versions
    cpe:2.3:a:sap:netweaver_as_abap_kernel:7.22:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.54:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.77:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.89:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.93:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:9.16:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:9.17:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:9.18:*:*:*:*:*:*:*
  • SAP/Netweaver As Abap Krnl64nuc2 versions
    cpe:2.3:a:sap:netweaver_as_abap_krnl64nuc:7.22:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:netweaver_as_abap_krnl64nuc:7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_krnl64nuc:7.22ext:*:*:*:*:*:*:*
  • SAP/Netweaver As Abap Krnl64uc
    cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.22:*:*:*:*:*:*:*
  • SAP/Sap Netweaver And Abap Platformllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: KRNL64NUC 7.22

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.