CVE-2026-44771 – Missing Authorization check in SAP S/4HANA (Draft operation)

CVE ID :CVE-2026-44771

Published : July 14, 2026, 1:16 a.m. | 14 minutes ago

Description :SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in escalation of privileges. This results in low impact on confidentiality, with no impact on integrity and availability of the application.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…