CVE-2026-44770 — Missing Authorization check in SAP S/4 HANA (Create Single Payment)

CVE-2026-44770

Missing Authorization check in SAP S/4 HANA (Create Single Payment) PUBLISHED

Description (CNA)

SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys resulting in disclosure of information. This has low impact on confidentiality, with no impact on integrity and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP S/4 HANA (Create Single Payment)	affected S4CORE 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected 108; affected 109

CWE

CWE-862

References

https://me.sap.com/notes/3713902
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.