CVE-2026-44771: Missing Authorization check in SAP S/4HANA (Draft operation)
SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in escalation of privileges. This results in low impact on confidentiality, with no impact on integrity and availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44771?
The severity of CVE-2026-44771 is classified as medium with a score of 4.3.
How does CVE-2026-44771 affect SAP S/4HANA?
CVE-2026-44771 allows a restricted authenticated user to access information without necessary authorization checks, potentially leading to privilege escalation.
Is there a patch available for CVE-2026-44771?
Yes, SAP has released a security patch to address CVE-2026-44771.
What impact does CVE-2026-44771 have on confidentiality?
CVE-2026-44771 has a low impact on confidentiality by allowing unauthorized access to information.
How can I mitigate the risks associated with CVE-2026-44771?
To mitigate risks from CVE-2026-44771, ensure that SAP S/4HANA is updated with the latest security patches that address authorization checks.