Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-66764 EUVD-2026-55881GHSA-f866-c6jw-4pqx

Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items)

Published Aug 11, 2026 · Updated Aug 11, 2026 · Assigned by sap

Description

Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated users, allowing them to use rules that have not been shared with them, resulting in privilege escalation.This vulnerability has a low impact on confidentiality, with no impact on integrity and availability of the application

Affected products

VendorProductAffectedFixed
SAP_SE SAP S/4 HANA (Reprocess Bank Statement Items) S4CORE 104, 105, 106, 107, 108, 109 —

Advisories 1

References