PT-2026-57942 · Sap Se · Sap Commerce Cloud

Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-44761

NVD

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentation. If left unchanged, an unauthenticated attacker could use these well-known credentials to obtain a valid access token and invoke certain APIs to read and modify data. Successful exploitation results in high impact on confidentiality and integrity, with no impact on availability.

Correção

Enumeração de Fraquezas

CWE-1392

Identificadores relacionados

CVE-2026-44761

Produtos afetados

Sap Commerce Cloud

Referências · 3

• https://url.sap/sapsecuritypatchday · Nota
• https://me.sap.com/notes/3753495 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-44761 · Nota de Segurança