Database Query Execution Vulnerability in SAP S/4HANA Project Management

CVE-2026-44769

What is CVE-2026-44769?

A security vulnerability exists in SAP S/4HANA's Project Management component, allowing attackers with elevated privileges to execute specially crafted database queries. This issue exposes sensitive backend database information, potentially compromising confidentiality. While it does not affect the integrity or availability of the application, it underscores the importance of securing database access and monitoring for unusual activity. For detailed information and mitigation steps, refer to SAP's security notes.

References