Authorization Bypass in SAP Advanced Planning and Optimization by SAP
CVE-2026-58245

3.8LOW

Key Information:

Vendor

SAP
Status
SAP Advanced Planning And Optimization (model Mix Planning)
Vendor
CVE Published:
11 August 2026

What is CVE-2026-58245?

SAP Advanced Planning and Optimization has a security flaw due to a hardcoded credential embedded within its source code. This vulnerability allows an attacker with elevated privileges to bypass necessary authorization measures. By exploiting this weakness, an attacker could remove significant planning-related limitations within the application. Although the impact on confidentiality and integrity is low, it poses potential risks to the application's overall security and operational integrity.

Affected Version(s)

SAP Advanced Planning and Optimization (Model Mix Planning) SCMAPO 713

SAP Advanced Planning and Optimization (Model Mix Planning) 714

SAP Advanced Planning and Optimization (Model Mix Planning) S4CORE 102

References

https://me.sap.com/notes/3763028
https://url.sap/sapsecuritypatchday

CVSS V3.1

Score:
3.8
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.