CVE-2026-58245
LowCVSS 3.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to bypass authorization and delete specific planning-related restrictions in the application. Successful exploitation could result in a low impact on confidentiality and integrity, with no impact on availability of the application.
Risk Assessment
The risk for the organization is the possibility of unauthorized changes to planning configurations by privileged users, which may compromise the integrity of planning data. Low impact on confidentiality and integrity still requires attention.
Recommendation
Remove or change hardcoded credentials and apply SAP patches. Also limit the number of users with high privileges and regularly audit their activities.
Original NVD description (English source)
SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to bypass authorization and delete specific planning-related restrictions in the application. Successful exploitation could result in a low impact on confidentiality and integrity, with no impact on availability of the application.