CVE-2026-23681

Name of the Vulnerable Software and Affected Versions SAP Support Tools Plug-In (affected versions not specified)

Description A missing authorization check within a function module in the SAP Support Tools Plug-In allows an authenticated attacker to execute specific function modules and obtain system and configuration information. This information disclosure could aid in planning further attacks. The issue has a low impact on the confidentiality of the application and does not affect its integrity or availability. The vulnerable component is a function module.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.