Sensitive Credential Exposure in SAP Start Service and Management Console

CVE-2026-89115

What is CVE-2026-89115?

The SAP Start Service and SAP Management Console have a vulnerability that allows sensitive credential information to be stored unprotected in process memory. An attacker with high privileges and local access can exploit this weakness to inspect the memory, enabling them to retrieve credentials that can be reused for unauthorized authentication. This vulnerability poses a significant risk to confidentiality, as it exposes critical information without affecting system integrity or availability.

References