Race Condition Vulnerability in SAP Commerce Cloud

CVE-2026-23684

What is CVE-2026-23684?

A race condition vulnerability exists in SAP Commerce Cloud that can be exploited during the product checkout process. When an attacker manipulates a cart by adding products, it may result in incorrect product values being recorded in the cart. This error can compromise the integrity of transaction data, leading to potential inconsistencies during checkout. While this impacts data integrity significantly, the integrity and availability of the application remain unaffected.

References