CVE-2026-27672 — Missing Authorization check in Material Master Application

Description (CNA)

The Material Master application does not enforce authorization checks for authenticated users when executing reports, resulting in the disclosure of sensitive information. This vulnerability has a low impact on confidentiality and does not affect integrity and availability of the system.

Affected (CNA)

Vendor / product	Versions
SAP_SE / Material Master Application	affected S4CORE 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected 108; affected 109; affected SCM_BASIS 700; affected SCM_BASIS 701; affected SCM_BASIS 702; affected SCM_BASIS 712; affected SCM_BASIS 713; affected SCM_BASIS 714

CWE

CWE-862

References

https://me.sap.com/notes/3703276
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.