CVE-2026-24317

MediumCVSS 5.0

Published: 10/03/2026(UTC)Updated: 03/11/2026(UTC)Translated: 04/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker can persuade a victim to place a malicious DLL in one of these directories, and the malicious command executes in the victim's context if GuiXT is enabled.

Risk Assessment

An attacker may achieve code execution in the victim's context, potentially affecting confidentiality, integrity, and availability. Impact is rated low but requires user interaction.

Recommendation

Apply the SAP fix for this CVE and restrict write permissions to directories used by the application. Consider disabling GuiXT if it is not required.

Other vulnerabilities in SAP GUI for Windows

CVE-2025-42888Medium
SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime. This vulnerability has a high impact on confidentiality, with no impact on integrity and availability.

Original NVD description (English source)

SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's context provided GuiXT is enabled. This vulnerability has a low impact on confidentiality, integrity, and availability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS