CVE-2026-58242: SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests…

PriorityP416low3.5CVSS 3.1

AVAACLPRLUINSUCLINAN

EPSS

0.16%

4.8th percentile

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sap_se	sap_cloud_connector	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.