CVE-2026-44771 — Missing Authorization check in SAP S/4HANA (Draft operation)

CVE-2026-44771

Missing Authorization check in SAP S/4HANA (Draft operation) PUBLISHED

Description (CNA)

SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in escalation of privileges. This results in low impact on confidentiality, with no impact on integrity and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP S/4HANA (Draft operation)	affected S4CORE 108

CWE

CWE-862

References

https://me.sap.com/notes/3515598
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.