Vulnerability Bulletins |
CVE-2026-66778 |
|
| Affected software | SAP |
| SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted request to obtain limited unauthorized access to information. This results in a low impact on confidentiality. There is no impact on integrity and availability. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-66778 | |