CVE-2026-0496

6.6 mediumEPSS 0.2%

Medium (6.6). EPSS 0.2% chance of exploitation in the next 30 days.

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file (including script files) without proper file format validation. This has low impact on confidentiality, integrity and availability of the application.

Severity

CVSS 3.1

6.6 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2026-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://me.sap.com/notes/3565506
https://url.sap/sapsecuritypatchday

Check your stack JSON