CVE-2026-27689CWE-606

Denial of service (DOS) in SAP Supply Chain Management

High · published March 10, 2026

CVSS v3.1
7.7
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution that consumes excessive system resources, potentially rendering the system unavailable. Successful exploitation results in a denial-of-service condition that impacts availability, while confidentiality and integrity remain unaffected.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00553 · 45.4th percentile
Weakness
CWE-606 · Unchecked Input for Loop Condition
Published
2026-03-10T00:19Z
EPSS history
Timeline
  • 10 MAR 00:19Z
    Denial of service (DOS) in SAP Supply Chain Management
    cvelistv5