medium2026-10-13SAP S/4HANA — Linear Asset ManagementCVE-2026-89121
Missing Instance-Level Authorization in Linear Asset Management
SAP S/4HANA
Our Take
Only relevant if you actually use Linear Asset Management on the newest release. Check before you spend a change slot.
Vulnerability Detail
A RAP business object lacks instance-level authorization checks.
Patch Action
Apply SAP Note 3799621 if you run Linear Asset Management on S4CORE 109.
Affected Versions
S4CORE 109
Patch Info