CVE-2026-24317mediumCWE-427

CVE-2026-24317: fallo de gravedad media en SAP_SE SAP GUI for Windows with active GuiXT

DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear SAP GUI for Windows with active GuiXT

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5epss 0.2%
SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's context provided GuiXT is enabled. This vulnerability has a low impact on confidentiality, integrity, and availability.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Productos afectados
SAP_SE · SAP GUI for Windows with active GuiXT