PT-2026-32552 · Unknown · Material Master

Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-27672

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Material Master (affected versions not specified)

Description The Material Master application fails to enforce authorization checks for authenticated users during the execution of reports, which leads to the disclosure of sensitive information.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-27672

Affected Products

Material Master

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-27672 · Security Note
• https://twitter.com/CVEarity/status/2044034391425593582 · Twitter Post
• https://me.sap.com/notes/3703276 · Note
• https://twitter.com/CVEnew/status/2043976169314291884 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note