CVE-2026-58242CWE-191

CVE-2026-58242

Low · published October 13, 2026

CVSS v3.1
3.5
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2026-10-13T05:16Z
References (2)
EPSS history
Timeline
  • 14 OCT 03:31Z
    EPSS moved — → 0%
    epss
  • 13 OCT 00:22Z
    Improper Authorization check in SAP Cloud Connector
    cvelistv5
  • 13 OCT 00:22Z
    Improper Authorization check in SAP Cloud Connector
    cvelistv5