CVE-2026-58242 PUBLISHED

Improper Authorization check in SAP Cloud Connector

Assigner: sap
Reserved: 29.06.2026 Published: 13.10.2026 Updated: 13.10.2026

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.

Metrics

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS Score: 3.5

Product Status

Vendor SAP_SE
Product SAP Cloud Connector
Versions Default: unaffected
  • Version SAP_CLOUD_CONNECTOR 2.0 is affected

References

Problem Types