CVE-2026-58242: Improper Authorization check in SAP Cloud Connector
SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to exploitation?
SAP Cloud Connector deployments that are reachable from an adjacent network are exposed if an attacker can authenticate with low-privileged access. The issue does not describe exposure to unauthenticated or Internet-only attackers.
What does an attacker need to exploit this issue?
The attacker needs adjacent-network access, a low-privileged account, and the ability to send specially crafted requests to SAP Cloud Connector. No user interaction is required.
What is the expected impact if exploitation succeeds?
Successful exploitation may disclose limited information about internal systems. The reported impact is limited to confidentiality; integrity and availability are not affected.