CVE-2026-58242

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.

Score
CVSS 3.1 3.5 Low
Status
Awaiting Analysis - cna@sap.com
Published
2026-10-13
Last modified
2026-10-15
Weaknesses
CWE-191

Affected products

References

 
 
© AVABIS GmbH privacypolicy about