CVE-2020-26822

CVE-2020-26822 is a critical vulnerability in SAP Solution Manager (JAVA stack), version 7.20, stemming from missing authorization checks in the Outside Discovery Configuration Service. This allows an unauthenticated attacker to compromise the system. With a CVSS score of 10.0, it presents a critical risk to the integrity and availability of the service, requiring no user interaction or privileges for exploitation. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating its perceived importance.