Log in Start free

Vulnerability · Published Sep 8, 2026 · Assigned by sap

CVE-2026-76962Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)

Medium 4.3

In plain English

A medium-severity missing authorization in SAP S/4HANA (Manage Bank Chains app) from SAP_SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.3%top 72.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on availability. There is no impact on confidentiality and integrity.

Affected products (as reported)

VendorProductVersions
SAP_SE SAP S/4HANA (Manage Bank Chains app) S4CORE 107108109

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References