Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-76962 EUVD-2026-72582GHSA-5jxw-c629-jw28

Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)

Published Sep 8, 2026 · Updated Sep 8, 2026 · Assigned by sap

Description

SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on availability. There is no impact on confidentiality and integrity.

Affected products

VendorProductAffectedFixed
SAP_SE SAP S/4HANA (Manage Bank Chains app) S4CORE 107, 108, 109 —

Advisories 1

References