CVE-2026-24317mediumCWE-427

CVE-2026-24317: medium-severity vulnerability in SAP_SE SAP GUI for Windows with active GuiXT

DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT

Published · Updated

Follow this CVE+ Monitor SAP GUI for Windows with active GuiXT

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 0.2%
SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's context provided GuiXT is enabled. This vulnerability has a low impact on confidentiality, integrity, and availability.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
SAP_SE · SAP GUI for Windows with active GuiXT