VULNERABILITY INTELLIGENCE
CVE-2026-0496
CVSS score6.6 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-01-13
Last modified2026-06-17
Description
SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file (including script files) without proper file format validation. This has low impact on confidentiality, integrity and availability of the application.