CVE-2026-44766

6.5 mediumEPSS 0.4%

Medium (6.5). EPSS 0.4% chance of exploitation in the next 30 days.

SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the database without proper validation. This could allow the user to access sensitive information, resulting in high impact on confidentiality, with no impact on integrity and availability of the application.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-09-08
Modified: 2026-09-08
Record from: the NVD, synced 2026-10-19

References

https://me.sap.com/notes/3756450
https://url.sap/sapsecuritypatchday

Check your stack JSON