MEDIUM 5.3 NVD

CVE-2026-66778

SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a

SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted request to obtain limited unauthorized access to information. This results in a low impact on confidentiality. There is no impact on integrity and availability.

References

https://me.sap.com/notes/3786038
https://url.sap/sapsecuritypatchday

Published: 2026-08-11 · Source: NVD · Feed updated: 2026-08-11

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-08-11 via NVD.

vulnfeed aggregates 7836 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.