AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SAPCVE-2026-58245

SAP Advanced Planning and Optimization: hard-coded credentials

SAP

CVE-2026-58245 · Published Aug 11, 2026 · updated Aug 26, 2026

Low3.8
No fix yet
SAP advisory

SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to bypass authorization and delete specific planning-related restrictions in the application. Successful exploitation could result in a low impact on confidentiality and integrity, with no impact on availability of the application.

Affected versions

PackageAffectedFixed in
SAP Advanced Planning and Optimization (Model Mix Planning)
Product
<= SCMAPO 713No fix yet
<= 714No fix yet
<= S4CORE 102No fix yet
<= 103No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-798

More SAP advisories

All SAP