What’s Vulnerable › Vulnerabilities
CVE-2026-76962: Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-08 · updated 2026-09-08
- Weakness: CWE-862
Description
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on availability. There is no impact on confidentiality and integrity.
Affected products
- SAP_SE SAP S/4HANA (Manage Bank Chains app): S4CORE 107, 108, 109
References
Get alerted when CVE-2026-76962 or the next vulnerability affects your stack