Missing Authorization check in SAP MDG (Review Match Groups Application)
CVE-2026-44750

4.3MEDIUM

Key Information:

Vendor

SAP
Status
SAP Mdg (review Match Groups Application)
Vendor
CVE Published:
9 June 2026

What is CVE-2026-44750?

SAP MDG (Review Match Groups Application) does not perform the necessary authorization checks for authenticated users. This could allow a low-privileged user to perform actions that would otherwise be restricted, resulting in escalation of privileges. This has a low impact on integrity, while confidentiality and availability are not impacted.

Affected Version(s)

SAP MDG (Review Match Groups Application) S4CORE 108

SAP MDG (Review Match Groups Application) SAP_BASIS 916

SAP MDG (Review Match Groups Application) SAP_BASIS 917

References

https://me.sap.com/notes/3673181
https://url.sap/sapsecuritypatchday

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.