PT-2026-39926 · Sap · Sap S/4Hana

CVE-2026-40133 · Published 2026-05-12 · Updated 2026-05-12

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions SAP S/4HANA (affected versions not specified)

Description A missing authorization check in Condition Maintenance allows an authenticated attacker to gain unauthorized access to view and modify condition table records. This issue impacts the confidentiality and integrity of the data and may prevent legitimate users from accessing records, affecting application availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-40133

Affected Products

Sap S/4Hana

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-40133 · Security Note
• https://twitter.com/VulmonFeeds/status/2054102501440242014 · Twitter Post
• https://t.me/CVEtracker/53453 · Telegram Post
• https://url.sap/sapsecuritypatchday · Note
• https://me.sap.com/notes/3718083 · Note