CVEvulnerability
CVE-2026-76962
4.3 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-09-08
- Last modified
- 2026-09-08
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-862
Description
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on availability. There is no impact on confidentiality and integrity.
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://me.sap.com/notes/3657599 me.sap.com
- https://url.sap/sapsecuritypatchday url.sap