CVE-2026-44770
published 2026-07-14CVE-2026-44770: SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys…
PriorityP423medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.28%
19.5th percentile
SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys resulting in disclosure of information. This has low impact on confidentiality, with no impact on integrity and availability of the application.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_s_4_hana | — | — |
| sap_se | sap_s_4_hana | — | — |
| sap_se | sap_s_4_hana | — | — |
| sap_se | sap_s_4_hana | — | — |
| sap_se | sap_s_4_hana | — | — |
| sap_se | sap_s_4_hana | — | — |
| sap_se | sap_s_4_hana | — | — |
| sap_se | sap_s_4_hana | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP S/4 HANA 4CORE 102 up to 108 Create Single Payment improper authorization
vuldb·2026-07-14·CVSS 4.3
CVE-2026-44770 [MEDIUM] SAP S/4 HANA 4CORE 102 up to 108 Create Single Payment improper authorization
A vulnerability, which was classified as problematic, was found in SAP S and 4 HANA 4CORE 102 up to 108. This affects an unknown part of the component Create Single Payment. Executing a manipulation can lead to improper authorization.
This vulnerability is handled as CVE-2026-44770. The attack can be executed remotely. There is not any exploit available.
GHSA
SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys resulting in disclosure of information.
ghsa_unreviewed·2026-07-14
CVE-2026-44770 [MEDIUM] CWE-862 SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys resulting in disclosure of information.
SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys resulting in disclosure of information. This has low impact on confidentiality, with no impact on integrity and availability of the application.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-14
Published