CVE-2026-23684

A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being created with erroneous product value which could be checked out. This leads to high impact on data integrity, with no impact on data confidentiality or availability of the application.

CVSS v3 5.9 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://me.sap.com/notes/3689543	Permissions Required
https://url.sap/sapsecuritypatchday	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sap:commerce_cloud:2205:::::::*
	cpe:2.3:a:sap:commerce_cloud:2211:::::::*

History

No history.

Information

Published : 2026-02-10 04:16

Updated : 2026-02-17 16:04

NVD link : CVE-2026-23684

Mitre link : CVE-2026-23684

CVE.ORG link : CVE-2026-23684

JSON object : View

Products Affected

sap

commerce_cloud

CWE

CWE-366

Race Condition within a Thread

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

{"id": "CVE-2026-23684", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2026-02-10T04:16:02.683", "references": [{"url": "https://me.sap.com/notes/3689543", "tags": ["Permissions Required"], "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "tags": ["Vendor Advisory"], "source": "cna@sap.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-366"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-362"}]}], "descriptions": [{"lang": "en", "value": "A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being created with erroneous product value which could be checked out. This leads to high impact on data integrity, with no impact on data confidentiality or availability of the application."}, {"lang": "es", "value": "Existe una vulnerabilidad de condici\u00f3n de carrera en la nube de SAP Commerce. Debido a esto, cuando un atacante a\u00f1ade productos a un carrito, puede resultar en la creaci\u00f3n de una entrada de carrito con un valor de producto err\u00f3neo que podr\u00eda ser finalizada la compra. Esto conlleva un alto impacto en la integridad de los datos, sin impacto en la confidencialidad de los datos ni en la disponibilidad de la aplicaci\u00f3n."}], "lastModified": "2026-02-17T16:04:38.427", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:commerce_cloud:2205:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "391FB1C6-1A52-4E53-B042-44D592AEC7A5"}, {"criteria": "cpe:2.3:a:sap:commerce_cloud:2211:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AC6D6B9-6A5A-4631-B10F-FB95150E1B68"}], "operator": "OR"}]}], "sourceIdentifier": "cna@sap.com"}