PT-2026-39929 · Sap · Sap Financial Consolidation

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-40136

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions SAP Financial Consolidation (affected versions not specified)

Description An authenticated attacker can disconnect other users by terminating their sessions, which temporarily prevents access. This issue results in a low impact on availability, while the confidentiality and integrity of the data remain unaffected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2026-40136

Affected Products

Sap Financial Consolidation

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-40136 · Security Note
• https://url.sap/sapsecuritypatchday · Note
• https://me.sap.com/notes/3713521 · Note
• https://twitter.com/VulmonFeeds/status/2054099941681721588 · Twitter Post
• https://t.me/CVEtracker/53456 · Telegram Post