What is CVE-2026-58245?

CVE-2026-58245 is a low-severity vulnerability in SAP Se Advanced Planning And Optimization (Model Mix Planning), classified under Use of Hard-coded Credentials. CVSS score: 3.8/10. Published 2026-08-11.

How severe is CVE-2026-58245?

Low severity. CVSS v3 base score is 3.8 out of 10.

Vulnerability in SAP Se Advanced Planning And Optimization (Model Mix Planning)

CVE-2026-58245

SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to bypass authorization and delete specific planning-related restrictions in the application. Successful exploitation could result in a low impact on confidentiality and integrity, with no impact on availability of the application.

Published 2026-08-11 · last modified 2026-08-26.

CVSS v3 metric

CVSS v3 base score 3.8 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N.

EPSS exploit prediction

EPSS: 0.003 (19.0th percentile), scored 2026-09-26.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 19th percentile — 19.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.002 · newest: 0.003 · change: +0.001

Affected products

SAP Se Advanced Planning And Optimization (Model Mix Planning) — versions SCMAPO 713, 714, S4CORE 102

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

Frequently asked questions

What is CVE-2026-58245?: CVE-2026-58245 is a low-severity vulnerability in SAP Se Advanced Planning And Optimization (Model Mix Planning), classified under Use of Hard-coded Credentials. CVSS score: 3.8/10. Published 2026-08-11.
How severe is CVE-2026-58245?: Low severity. CVSS v3 base score is 3.8 out of 10.