SAP S/4HANA Authorization Vulnerability in Human Capital Management

CVE-2026-34264

What is CVE-2026-34264?

In SAP S/4HANA's Human Capital Management module, a vulnerability arises during the authorization checks that may expose sensitive information. An authenticated user with limited privileges can leverage this flaw to guess and enumerate content outside their access rights. Consequently, this leads to the potential disclosure of confidential information while leaving integrity and availability levels intact. Organizations using this system should assess their security posture and implement necessary precautions.

References