7.1 HighCWE-862
CVE-2026-34256
SAP_SE SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise) vulnerability
SAP_SESAP ERP and SAP S/4 HANA (Private Cloud and On-Premise)
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 16 Oct
0.3%probability of exploitation in the next 30 days
Higher than 26% of scored CVEs
SeverityCVSS
7.1High
Description NVD
Due to a missing authorization check in SAP ERP and SAP S/4HANA (Private Cloud and On-Premise), an authenticated attacker could execute a particular ABAP report to overwrite any existing eight?character executable ABAP report without authorization. If the overwritten report is subsequently executed, the intended functionality could become unavailable. Successful exploitation impacts availability, with a limited impact on integrity confined to the affected report, while confidentiality remains unaffected.
Coverage No articles yet
No CyberSIXT article names CVE-2026-34256 yet. New articles appear here and in the RSS feed.