CVE-2026-76962CWE-862broken-access-control

CVE-2026-76962

Medium · published September 8, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on availability. There is no impact on confidentiality and integrity.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-09-08T05:17Z
References (2)
https://me.sap.com/notes/3657599 · [email protected]https://url.sap/sapsecuritypatchday · [email protected]
EPSS history
Timeline
  • 09 SEP 03:20Z
    EPSS moved — → 0%
    epss
  • 08 SEP 00:12Z
    Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)
    cvelistv5