Vulnerability · Published Aug 11, 2026 · Assigned by sap
CVE-2026-58245Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning)
Low 3.8
In plain English
A low-severity hard-coded credentials in SAP Advanced Planning and Optimization (Model Mix Planning) from SAP_SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Official description
SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to bypass authorization and delete specific planning-related restrictions in the application. Successful exploitation could result in a low impact on confidentiality and integrity, with no impact on availability of the application.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SAP_SE | SAP Advanced Planning and Optimization (Model Mix Planning) | SCMAPO 713714S4CORE 102103104S4COREOP 104105106 |
Weakness: CWE-798 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N