What’s Vulnerable › Vulnerabilities

CVE-2026-44750: Missing Authorization check in SAP MDG (Review Match Groups Application)

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-09 · updated 2026-07-23
• Weakness: CWE-862

Description

SAP MDG (Review Match Groups Application) does not perform the necessary authorization checks for authenticated users. This could allow a low-privileged user to perform actions that would otherwise be restricted, resulting in escalation of privileges. This has a low impact on integrity, while confidentiality and availability are not impacted.

Affected products

• SAP_SE SAP MDG (Review Match Groups Application): S4CORE 108, SAP_BASIS 916, SAP_BASIS 917, SAP_ABA 816

References

• https://me.sap.com/notes/3673181
• https://url.sap/sapsecuritypatchday

Get alerted when CVE-2026-44750 or the next vulnerability affects your stack