What is CVE-2026-34261?

CVE-2026-34261 is a medium-severity vulnerability in Sap Se Business Analytics And Content Management, classified under Missing Authorization. CVSS score: 6.5/10. Published 2026-04-14.

How severe is CVE-2026-34261?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Sap Se Business Analytics And Content Management

CVE-2026-34261

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

Vulnerability class: Broken Access Control

EPSS: 0.002 (11.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Sap_se Sap Business Analytics And Content Management — versions S4HCMRXX 100, 101, 102

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

Frequently asked questions

What is CVE-2026-34261?: CVE-2026-34261 is a medium-severity vulnerability in Sap Se Business Analytics And Content Management, classified under Missing Authorization. CVSS score: 6.5/10. Published 2026-04-14.
How severe is CVE-2026-34261?: Medium severity. CVSS v3 base score is 6.5 out of 10.