CVE-2020-26837

CVE-2020-26837 is a critical path traversal vulnerability in SAP Solution Manager 7.2 (User Experience Monitoring) that allows an authenticated attacker to upload malicious scripts. This can lead to significant compromise of confidentiality by exposing file system elements, partial compromise of integrity through configuration modification, and partial denial of availability for certain services. With a CVSS score of 9.1, it is easily exploitable over the network with low complexity and requires only low privileges. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered some community discussion and media coverage, indicating awareness within the cybersecurity landscape.