CVE-2020-26809: SAP Commerce Cloud

Medium severity, CVSS 5.3. EPSS: 2.1% chance of exploitation in the next 30 days.

SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission checks via the '/medias' endpoint hence gaining access to Secure Media folders. This folder could contain sensitive files that results in disclosure of sensitive information and impact system configuration confidentiality.

Affected products

• SAP Commerce Cloud: version 1808 only; version 1811 only; version 1905 only; version 2005 only

Published 2020-11-10. Last modified 2026-06-17.