Integer overflow in SAP Se Cloud Connector
CVE-2026-58242
SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- SAP Se Cloud Connector — versions SAP_CLOUD_CONNECTOR 2.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-58242?
- CVE-2026-58242 is a low-severity vulnerability in SAP Se Cloud Connector, classified under Integer Underflow. CVSS score: 3.5/10. Published 2026-10-13.
- How severe is CVE-2026-58242?
- Low severity. CVSS v3 base score is 3.5 out of 10.