Is CVE-2026-44770 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-44770?

CVE-2026-44770 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-44770

Description

SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys resulting in disclosure of information. This has low impact on confidentiality, with no impact on integrity and availability of the application.