CVE-2026-44761
|
| |
|
|
Affected software |
SAP |
|
|
|
SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentation. If left unchanged, an unauthenticated attacker could use these well-known credentials to obtain a valid access token and invoke certain APIs to read and modify data. Successful exploitation results in high impact on confidentiality and integrity, with no impact on availability. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44761 |
