Threats Tagged 'cve-2026-0503'

CVE-2026-0503 is a medium-severity vulnerability in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management) caused by missing authorization checks. It allows an attacker with some privileges to extract hardcoded clear-text credentials and bypass password authentication by manipulating user parameters. Successful exploitation enables unauthorized access to modify or delete change pointer information within EHS objects, potentially impacting downstream systems. The vulnerability affects multiple SAP_APPL and S4CORE versions and does not impact system availability. No known exploits are currently reported in the wild. The CVSS score is 6.4, reflecting a network attack vector with low complexity but requiring privileges and no user interaction. European organizations using affected SAP versions, especially in manufacturing, chemicals, and pharmaceuticals, should prioritize patching and access control reviews. Countries with high SAP adoption and critical industrial sectors like Germany, France, and the Netherlands are most at risk. Mitigations include applying SAP patches when available, restricting user privileges, monitoring EHS object changes, and auditing credential storage and access patterns.

MediumVulnerabilityGermanyFranceNetherlands+5#cve#cve-2026-0503#cwe-862