SAP Cloud Connector Improper Authorization Check (CVE-2026-58242)
CVE-2026-58242 Published on October 13, 2026

Improper Authorization check in SAP Cloud Connector
SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.

NVD

Vulnerability Analysis

Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
NONE
Availability Impact:
NONE

Weakness Type

What is an Integer underflow Vulnerability?

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result. This can happen in signed and unsigned cases.

CVE-2026-58242 has been classified to as an Integer underflow vulnerability or weakness.


Products Associated with CVE-2026-58242

Want to know whenever a new CVE is published for SAP Cloud Connector? stack.watch will email you.

SAP Cloud Connector
 

Affected Versions

SAP_SE SAP Cloud Connector Version SAP_CLOUD_CONNECTOR 2.0 is affected by CVE-2026-58242