PT-2026-32569 · Sap · Sap Hana Cockpit+1

Ben Samtleben + 1 · Published 2026-04-13 · Updated 2026-04-16 · CVE-2026-34262

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP HANA Cockpit and HANA Database Explorer (affected versions not specified)

Description An information disclosure issue exists in SAP HANA Cockpit and HANA Database Explorer where X.509 private keys are leaked via Database Explorer access. This leak could allow for server impersonation.

Recommendations Manually revoke and rotate certificates.

Exploit

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

BDU:2026-07544

CVE-2026-34262

Affected Products

Hana Database Explorer

Sap Hana Cockpit

References · 9

• 🔥 http://seclists.org/fulldisclosure/2026/Apr/16 · Exploit
• https://bdu.fstec.ru/vul/2026-07544 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34262 · Security Note
• https://twitter.com/CVEarity/status/2044081626167292182 · Twitter Post
• https://me.sap.com/notes/3730639 · Note
• https://twitter.com/vuln_tracker/status/2044612612185620561 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/2043976155623997507 · Twitter Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/april-2026.html · Note