Detections
Analytics
CVE-2026-0501
critical
Description
Due to insufficient input validation in SAP S/4HANA Private Cloud and On-Premise (Financials General Ledger), an authenticated user could execute crafted SQL queries to read, modify, and delete backend database data. This leads to a high impact on the confidentiality, integrity, and availability of the application.
References
https://www.securityweek.com/saps-january-2026-security-updates-patch-critical-vulnerabilities/