Authorization Flaw in SAP Solution Tools Plug-In Exposes Sensitive Data

CVE-2026-109808

What is CVE-2026-109808?

The SAP Solution Tools Plug-In features a missing authorization check in specific remote-enabled functionality. This flaw enables an authenticated attacker to exploit the vulnerability and access sensitive data that would typically be restricted. However, successful exploitation requires the attacker to have prior knowledge of certain internal identifiers, limiting the circumstances under which this vulnerability can be utilized. While the data accessible through this exploit may compromise confidentiality, there is no effect on data integrity or system availability.

References