CVE-2026-23684
Medium · 5.9CVSS
5.9
EPSS
0.2%
Published
Feb 10, 2026
CISA due date
—
The record
A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being created with erroneous product value which could be checked out. This leads to high impact on data integrity, with no impact on data confidentiality or availability of the application.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-3904 Calling NSS-backed functions that support caching via nscd may call the nscd client side… CWE-366
- GHSA-45hj-9x76-wp9g Outray has a Race Condition in the cli's webapp CWE-366
- CVE-2026-22819 Outray has a Race Condition in the cli's webapp CWE-366
- CVE-2023-6546 A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. CWE-366
- CVE-2026-114641 Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and… CWE-362
- CVE-2026-109279 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when… CWE-362
- CVE-2026-97032 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder… CWE-362
- CVE-2026-98163 In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid… CWE-362