CVE-2026-40136 — Denial of service (DoS) in SAP Financial Consolidation

CVE-2026-40136

Denial of service (DoS) in SAP Financial Consolidation PUBLISHED

Description (CNA)

SAP Financial Consolidation allows an authenticated attacker to disconnect other users by terminating their sessions temporarily preventing access. However, the application itself cannot be compromised resulting in a low impact on availability. There is no impact on confidentiality and integrity of the data

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Financial Consolidation	affected FINANCE 1010

CWE

CWE-404

References

https://me.sap.com/notes/3713521
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.