CVE-2026-34256
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Missing Authorization check in SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise)
Due to a missing authorization check in SAP ERP and SAP S/4HANA (Private Cloud and On-Premise), an authenticated attacker could execute a particular ABAP report to overwrite any existing eight?character executable ABAP report without authorization. If the overwritten report is subsequently executed, the intended functionality could become unavailable. Successful exploitation impacts availability, with a limited impact on integrity confined to the affected report, while confidentiality remains unaffected.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise)
- Vendor
- SAP_SE
- Product
- SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise)
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| SAP_FIN 618 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 720 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 730 | affected | Unavailable | Unavailable | Unavailable | None listed |
| EA-FIN 617 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 700 | affected | Unavailable | Unavailable | Unavailable | None listed |
| SAPSCORE 135 | affected | Unavailable | Unavailable | Unavailable | None listed |
| S4CORE 102 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 103 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 104 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 105 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 106 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 107 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 108 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 109 | affected | Unavailable | Unavailable | Unavailable | None listed |
| EA-APPL 600 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 602 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 603 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 604 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 605 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 606 | affected | Unavailable | Unavailable | Unavailable | None listed |