CVE-2026-76962 — Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)

CVE-2026-76962

Missing Authorization check in SAP S/4HANA (Manage Bank Chains app) PUBLISHED

Description (CNA)

SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on availability. There is no impact on confidentiality and integrity.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP S/4HANA (Manage Bank Chains app)	affected S4CORE 107; affected 108; affected 109

CWE

CWE-862

References

https://me.sap.com/notes/3657599
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.