GHSA-4587-27hr-9q42

GHSA-4587-27hr-9q42 PUBLISHED CVSS 4.900000095367432 MEDIUM

Record from GitHub Advisory Database · Published April 14, 2026

Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthorized control over file operations which could leads to no impact on Confidentiality, Low impact on Integrity and Availability of the application.

Risk scores

CVSS 3.1

4.900000095367432

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L

Timeline

Apr 14, 2026 CVE Published
May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-4587-27hr-9q42
vulnetix vdb fixes GHSA-4587-27hr-9q42

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-4587-27hr-9q42/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →