CVE-2026-40133 — Missing Authorization check in SAP S/4HANA Condition Maintenance

CVE-2026-40133

Missing Authorization check in SAP S/4HANA Condition Maintenance PUBLISHED

Description (CNA)

Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table records, resulting in low impact on the confidentiality and integrity of the data. Additionally, this vulnerability may prevent the legitimate user from accessing the records, causing low impact on application availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP S/4HANA Condition Maintenance	affected S4CORE 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected 108; affected 109

CWE

CWE-862

References

https://me.sap.com/notes/3718083
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.