CVE-2026-24319
Medium · 5.8CVSS
5.8
EPSS
0.1%
Published
Feb 10, 2026
CISA due date
—
The record
In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high impact on confidentiality and integrity, with no impact on availability.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-77407 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-316
- CVE-2026-53604 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. CWE-316
- CVE-2026-75137 UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that… CWE-316
- CVE-2026-75135 UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that… CWE-316
- CVE-2026-8636 IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9… CWE-316
- CVE-2026-0857 Cleartext Storage of Sensitive Information in Memory vulnerability in Mesalvo Meona… CWE-316
- GHSA-62vx-hpcr-m9ch @perfood/couch-auth may expose session tokens, passwords CWE-316
- CVE-2025-60794 @perfood/couch-auth may expose session tokens, passwords CWE-316