CVE-2026-44750 — Missing Authorization check in SAP MDG (Review Match Groups Application)

CVE-2026-44750

Missing Authorization check in SAP MDG (Review Match Groups Application) PUBLISHED

Description (CNA)

SAP MDG (Review Match Groups Application) does not perform the necessary authorization checks for authenticated users. This could allow a low-privileged user to perform actions that would otherwise be restricted, resulting in escalation of privileges. This has a low impact on integrity, while confidentiality and availability are not impacted.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP MDG (Review Match Groups Application)	affected S4CORE 108; affected SAP_BASIS 916; affected SAP_BASIS 917; affected SAP_ABA 816

CWE

CWE-862

References

https://me.sap.com/notes/3673181
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.