CVE-2026-58242 — Improper Authorization check in SAP Cloud Connector

CVE-2026-58242

Improper Authorization check in SAP Cloud Connector PUBLISHED

Description (CNA)

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Cloud Connector	affected SAP_CLOUD_CONNECTOR 2.0

CWE

CWE-191

References

https://me.sap.com/notes/3767634
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.