MEDIUM 4.3 NVD

CVE-2026-66761

SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high volumes of data without consumi

SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high volumes of data without consuming responses, causing unbounded memory growth. This results in a low impact on availability. There is no impact on confidentiality and integrity.

References

https://me.sap.com/notes/3786038
https://url.sap/sapsecuritypatchday

Published: 2026-08-11 · Source: NVD · Feed updated: 2026-08-11

This medium severity vulnerability with a CVSS score of 4.3 was published on 2026-08-11 via NVD.

vulnfeed aggregates 7836 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.