CVE-2026-58245 — Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning)

Description (CNA)

SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to bypass authorization and delete specific planning-related restrictions in the application. Successful exploitation could result in a low impact on confidentiality and integrity, with no impact on availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Advanced Planning and Optimization (Model Mix Planning)	affected SCMAPO 713; affected 714; affected S4CORE 102; affected 103; affected 104; affected S4COREOP 104; affected 105; affected 106; affected 107; affected 108; affected 109; affected SCM 700; affected 701; affected 702; affected 712

CWE

CWE-798

References

https://me.sap.com/notes/3763028
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.