Is CVE-2026-44771 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-44771?

CVE-2026-44771 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-44771

Description

SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in escalation of privileges. This results in low impact on confidentiality, with no impact on integrity and availability of the application.