Auth bypass in Sap Se Fiori App (Intercompany Balance Reconciliation)

CVE-2026-0511

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted.

Vulnerability class: Broken Access Control

EPSS: 0.003 (17.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-0511?
CVE-2026-0511 is a high-severity vulnerability in Sap Se Fiori App (Intercompany Balance Reconciliation), classified under Missing Authorization. CVSS score: 8.1/10. Published 2026-01-13.
How severe is CVE-2026-0511?
High severity. CVSS v3 base score is 8.1 out of 10.