CVE-2026-76962
published 2026-09-08CVE-2026-76962: SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges…
PriorityP424medium4.3CVSS 3.1
AVNACLPRLUINSUCNINAL
EPSS
0.34%
26.5th percentile
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on availability. There is no impact on confidentiality and integrity.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_s_4hana | — | — |
| sap_se | sap_s_4hana | — | — |
| sap_se | sap_s_4hana | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality.
ghsa_unreviewed·2026-09-08
CVE-2026-76962 [MEDIUM] CWE-862 SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality.
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on availability. There is no impact on confidentiality and integrity.
VulDB
SAP S4HANA 4CORE 107/108/109 improper authorization
vuldb·2026-09-08·CVSS 4.3
CVE-2026-76962 [MEDIUM] SAP S4HANA 4CORE 107/108/109 improper authorization
A vulnerability has been found in SAP S4HANA 4CORE 107/108/109 and classified as problematic. The impacted element is an unknown function. This manipulation causes improper authorization.
This vulnerability appears as CVE-2026-76962. The attack may be initiated remotely. There is no available exploit.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-08
Published