CVE-2026-58242
Received Received - Intake

Improper Authorization Check in SAP Cloud Connector

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: SAP SE

Description
SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-58242
EUVD
EUVD-2026-98183

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
SAP_SE SAP Cloud Connector SAP_CLOUD_CONNECTOR 2.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-191 The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

SAP Cloud Connector has an improper authorization check that allows low-privileged attackers on adjacent networks to send specially crafted requests. This could let them get limited information about internal systems but does not affect system integrity or availability.

Detection Guidance

Detecting this vulnerability requires monitoring network traffic for unusual requests targeting SAP Cloud Connector. Check logs for adjacent network access attempts or requests with crafted parameters. Use network scanning tools like nmap to identify SAP Cloud Connector instances and verify if they are exposed to adjacent networks.

Impact Analysis

An attacker could gain access to some internal system details, leading to low impact on confidentiality. However, they cannot modify data or disrupt services.

Compliance Impact

This vulnerability has a low impact on confidentiality, allowing limited information exposure about internal systems. It does not affect integrity or availability. Compliance impact would depend on the specific data exposed, but the limited scope suggests minimal risk to GDPR or HIPAA compliance unless sensitive data is involved.

Mitigation Strategies

Immediately restrict network access to SAP Cloud Connector to only trusted systems. Apply the latest security patches from SAP. Review and tighten firewall rules to block adjacent network access. Monitor logs for suspicious activity and ensure proper authorization checks are enforced.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58242. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart