CVE-2026-24326 — Due to a missing authorization check in the Disconnected Operations of the SAP S/4HANA Defense & Security, an attacker with user privileges could call remote-enabled function modules to do direct — CVE Database · The Intelligence Room