CVE-2026-76962

MEDIUMCVSS 4.3

Description

SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on availability. There is no impact on confidentiality and integrity.

Timeline

Published:September 8th, 2026 1:17 AM

Last modified:September 8th, 2026 1:17 AM

CVSS Scoring

CVSS v3: 4.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-862

References & Reports

Advisories, patches, and third-party reports

https://me.sap.com/notes/3657599
https://url.sap/sapsecuritypatchday

Source: NIST NVD · Data may lag official sources by up to one minute