CVE-2026-44744

Name of the Vulnerable Software and Affected Versions SAP S/4HANA (On-Premise) (affected versions not specified)

Description An authenticated attacker can exploit a SQL injection flaw in a remote-enabled function module component to execute unauthorized database queries. This issue allows access to sensitive information, significantly impacting data confidentiality, although it does not affect the integrity or availability of the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.