Authorization Bypass Vulnerability in SAP S/4HANA by SAP

CVE-2026-27673

What is CVE-2026-27673?

A security flaw in SAP S/4HANA affects both its Private Cloud and On-Premise versions, where a lack of proper authorization checks enables authenticated users to execute unauthorized file deletions on the operating system. This loophole could result in unauthorized control over critical file operations, putting system integrity and availability at risk. It is essential for organizations using SAP S/4HANA to implement the latest security patches and remain vigilant against potential exploitation.

References