CVE-2026-89121: SAP S/4HANA (Linear Asset Management RAP Business Object) S4CORE 109

Affected technology

SAP S/4HANA (Linear Asset Management RAP Business Object) · S4CORE 109
SAP_SE

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not authorized for. Vendor/CNA’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and availability impact as none; integrity impact as high.