CVE Feed

    Dashboard / CVE / CVE-2026-24317

    CVE-2026-24317

    SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's context provided GuiXT is enabled. This vulnerability has a low impact on confidentiality, integrity, and availability.

    Published:Mar 10, 2026
    Last Modified:Apr 16, 2026
    EPS:Mar 10, 2026
    EPSS Score:0.00045
    CVSS Score:5

    Affected Products

    Vendor
    Sap Se
    Product
    Sap Gui For Windows With Active Guixt

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-427 Uncontrolled Search Path Element

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High