CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-34260 — SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerabil...

·Source: NIST NVD

Updated:

Executive Summary

SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows an authenticated attacker to inject malicious SQL statements through user-controlled input. The application directly concatenates this malicious user input into SQL queries, which are then passed to the underlying database without proper validation or sanitization. Upon successful exploitation, an attac

Analysis

SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows an authenticated attacker to inject malicious SQL statements through user-controlled input. The application directly concatenates this malicious user input into SQL queries, which are then passed to the underlying database without proper validation or sanitization. Upon successful exploitation, an attacker may gain unauthorized access to sensitive database information and could potentially crash the application. This vulnerability has a high impact on the confidentiality and availability of the application, while integrity remains unaffected. CVSS Score: 9.6. Published: 2026-05-12T03:16:11.517.

Indicators of Compromise (1)

CVE (1)
CVE-2026-34260
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on May 12, 2026. Verified by: NIST.

Related Threats

CRITICALRansomware

May Patch Tuesday roundup: Critical holes in Windows Netlogon, DNS, and SAP S/4HANA

Critical vulnerabilities in Windows Server’s networking and identity infrastructure, as well as a serious hole in Microsoft Dynamics 365 on-premises version, highlight Microsoft’s May Patch Tuesday fixes. They are among the 118 vulnerabilities identified this month by the company. Some in cloud-based services like Azure and Microsoft Teams have already been fixed, so no admin action is needed. But

CVE-2026-41089CVE-2026-41096
CSO Online
MEDIUMVulnerability

PhotonPay raises $40m for stablecoin-centric financial OS

Stablecoin-centric financial operating system PhotonPay has raised $40 million in a Series C funding round led by Blockchain Capital.

Finextra
MEDIUMVulnerability

Kalshi valuation jumps to $40 billion on latest raise

Prediction market Kalshi has seen its valuation nearly double to $40 billion in a matter of months off the back of a $1 billion Series G co-led by Wellington and Sequoia.

Finextra