PT-2026-57947 · Sap Se · Sap S/4Hana

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-44771

Mitre

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in escalation of privileges. This results in low impact on confidentiality, with no impact on integrity and availability of the application.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-44771

Affected Products

Sap S/4Hana

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-44771 · Security Note
• https://url.sap/sapsecuritypatchday · Note
• https://me.sap.com/notes/3515598 · Note