Dashboard / CVE-2026-27673

CVE-2026-27673

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 50/100
Published: 2026-04-14 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network No Interaction Scope Change

CVSS Vector Breakdown

AV: Network
AC: High
PR: Low
UI: None
S: Changed
C: None
I: Low
A: Low

Description

Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthorized control over file operations which could leads to no impact on Confidentiality, Low impact on Integrity and Availability of the application.

Weakness Classification (1)

References & Advisories (2)

Bug Bounty Relevance

50 / 100
✓ Network accessible
✓ No user interaction

CVSS Score

4.9 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L

EPSS — Exploitation Probability

0.16%
Raw Score 0.001580
Percentile 4.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00158
2026-10-28
0.00158

Intelligence Sources

nvd ref →

External Links