Improper Authorization in SAP Cloud Connector Affects Network Security
CVE-2026-58242

3.5LOW

Key Information:

Vendor

SAP
Status
SAP Cloud Connector
Vendor
CVE Published:
13 October 2026

What is CVE-2026-58242?

The SAP Cloud Connector suffers from an improper authorization check that may be exploited by low-privileged attackers on adjacent networks through specially crafted requests. While this vulnerability enables attackers to gain access to limited information regarding internal systems, it poses minimal risk to confidentiality, integrity, and availability.

Affected Version(s)

SAP Cloud Connector SAP_CLOUD_CONNECTOR 2.0

References

https://me.sap.com/notes/3767634
https://url.sap/sapsecuritypatchday

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.