CVE-2026-23689: Denial of service (DOS) in SAP Supply Chain Management
Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution that consumes excessive system resources, potentially rendering the system unavailable. Successful exploitation results in a denial-of-service condition that impacts availability, while confidentiality and integrity remain unaffected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23689?
CVE-2026-23689 is considered a high-severity vulnerability due to its potential to cause denial of service.
Who can exploit CVE-2026-23689?
An authenticated attacker with regular user privileges and network access can exploit CVE-2026-23689.
How do I fix CVE-2026-23689?
Fixing CVE-2026-23689 involves applying the latest security patches provided by SAP for the Supply Chain Management software.
What impact does CVE-2026-23689 have on SAP Supply Chain Management?
CVE-2026-23689 can lead to uncontrolled resource consumption, resulting in potential denial of service for the SAP Supply Chain Management application.
Is there a workaround for CVE-2026-23689?
Currently, there are no documented workarounds for CVE-2026-23689, and it is recommended to apply patches as soon as available.