VULNERABILITY INTELLIGENCE

CVE-2026-24322

CVSS score7.7 HIGH

EPSS probability0.24%

CISA KEVNot currently listed

Published2026-02-10

Last modified2026-06-17

Description

SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability.