CVE-2026-44750 PUBLISHED

Missing Authorization check in SAP MDG (Review Match Groups Application)

Assigner: sap
Reserved: 07.05.2026 Published: 09.06.2026 Updated: 09.06.2026

SAP MDG (Review Match Groups Application) does not perform the necessary authorization checks for authenticated users. This could allow a low-privileged user to perform actions that would otherwise be restricted, resulting in escalation of privileges. This has a low impact on integrity, while confidentiality and availability are not impacted.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS Score: 4.3

Product Status

Vendor SAP_SE
Product SAP MDG (Review Match Groups Application)
Versions Default: unaffected
  • Version S4CORE 108 is affected
  • Version SAP_BASIS 916 is affected
  • Version SAP_BASIS 917 is affected
  • Version SAP_ABA 816 is affected

References

Problem Types