AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SAPCVE-2026-76962

SAP S/4HANA (Manage Bank Chains app): missing authorization

SAP

CVE-2026-76962 · Published Sep 8, 2026

Medium4.3
No fix yet
SAP advisory

SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on availability. There is no impact on confidentiality and integrity.

Affected versions

PackageAffectedFixed in
SAP S/4HANA (Manage Bank Chains app)
Product
<= S4CORE 107No fix yet
<= 108No fix yet
<= 109No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-862

More SAP advisories

All SAP
Medium 4.3Sep 8SAP NetWeaver and ABAP Platform: missing authorizationCVE-2026-76963no fix yetHigh 7.8Sep 8SAP NetWeaver Business Client: code executionCVE-2026-76967no fix yetMedium 6.5Sep 8SAP Web Dispatcher, Internet: information disclosureCVE-2026-76968no fix yetCritical 9.4Sep 8SAP Cloud Application Programming Model (CAP): weakly protected credentialsCVE-2026-76969no fix yetMedium 6.5Sep 8SAP Manufacturing Integration and Intelligence: server-side request forgeryCVE-2026-76971no fix yetMedium 4.3Sep 8SAP UI5 does not sufficiently validate the parent frame's origin against the...CVE-2026-76977no fix yet