CVE-2026-58242
3.5LowPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Limited impact
- Weakness
- CWE-191
Impact
An attacker with adjacent network access and low-privileged credentials can view limited information about internal systems through crafted requests. Integrity and availability are unaffected.
Root cause
An improper authorization check allows authenticated users on the local network segment to bypass access restrictions.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Fix & remediation
Apply the patch described in SAP Note 3767634. If patching must wait, restrict adjacent network access to the SAP Cloud Connector management interface to trusted hosts only.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.