OS Command Execution Vulnerability in SAP Forecasting & Replenishment

CVE-2026-34259

What is CVE-2026-34259?

The OS Command Execution vulnerability in SAP Forecasting & Replenishment allows an authenticated attacker with administrative rights to exploit a non-remote-enabled function. This could lead to the execution of arbitrary operating system commands, granting the attacker the ability to access, modify, or shut down critical system data. The resulting compromise impacts the confidentiality, integrity, and availability of the system, posing significant risks to organizational operations.

References