Search: CVE-2026-34259

CVE-2026-34259 is an OS command injection vulnerability in SAP Forecasting & Replenishment affecting versions SCM 702, 712, 713, and 714. An authenticated attacker with administrative privileges can exploit a non-remote-enabled function to execute arbitrary operating system commands. This could lead to full compromise of confidentiality, integrity, and availability by allowing reading or modification of system data or shutting down the system. The vulnerability has a high severity score of 8.2. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.