CVE-2026-0496

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file (including script files) without proper file format validation. This has low impact on confidentiality, integrity and availability of the application.

Score

CVSS 3.1 6.6 Medium

Status

Deferred - cna@sap.com

Published

2026-01-13

Last modified

2026-01-13

Weaknesses

CWE-434

Affected products

• Sap Fiori App Intercompany Balance Reconciliation (Sap Se)

References

• https://me.sap.com/notes/3565506
• https://url.sap/sapsecuritypatchday