CVE-2026-58238

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex to execute. This results in a high impact on availability. There is no impact on confidentiality and integrity.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Approuter Sap Business Ai Platform (approuter)

CVE-2026-58230

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a specially crafted token to cause sensitive credential material to be sent to an attacker-controlled destination. The attack complexity is high due to non-default preconditions required in the target environment. This results in a high impact on confidentiality and a low impact on integrity and availability.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Approuter Sap Business Ai Platform (approuter)

CVE-2026-27690

HTTP Request Smuggling in SAP Approuter

Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailable. This leads to a high impact on confidentiality and availability.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Approuter Sap Approuter

CVE-2026-66776

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An attacker with low privileges could send a specially crafted request that bypasses the integrity check and loads another user's session context. Successful exploitation requires the attacker to have previously observed matching session values out-of-band, which makes the attack complex to execute. This could result in a high impact on confidentiality and a low impact on integrity. There is no impact on availability.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Approuter Sap Business Ai Platform (approuter)

CVE-2026-66778

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted request to obtain limited unauthorized access to information. This results in a low impact on confidentiality. There is no impact on integrity and availability.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Approuter Sap Business Ai Platform (approuter)

CVE-2026-44745

Open Redirect vulnerability in SAP Approuter

SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized access. Successful exploitation results in a high impact to the confidentiality and integrity with no impact on the availability of the application.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Approuter Sap Approuter

CVE-2026-58237

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low privileges could exploit this to access restricted functionality. Successful exploitation could allow the attacker to read sensitive information and perform limited modifications, resulting in a high impact on confidentiality and a low impact on integrity. There is no impact on availability.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Approuter Sap Business Ai Platform (approuter)

CVE-2026-58239

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted requests to spoof the tenant context under conditions not fully within their control. Successful exploitation could allow limited access to another tenant's information, resulting in a low impact on confidentiality. There is no impact on integrity and availability.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Approuter Sap Business Ai Platform (approuter)

CVE-2026-66761

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high volumes of data without consuming responses, causing unbounded memory growth. This results in a low impact on availability. There is no impact on confidentiality and integrity.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Approuter Sap Business Ai Platform (approuter)

CVE-2026-66775

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated attacker could craft a malicious link and trick a victim into following it. Successful exploitation could allow the attacker to bind the victim's session to an attacker-controlled identity, resulting in a low impact on integrity. There is no impact on confidentiality and availability.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Approuter Sap Business Ai Platform (approuter)

CVE-2026-66777

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required conditions, an attacker with low privileges could send specially crafted requests to bypass authorization checks and reach protected resources beyond their assigned scope. Successful exploitation could allow the attacker to read sensitive data and perform limited modifications on protected resources, resulting in a high impact on confidentiality and a low impact on integrity. There is no impact on availability.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Approuter Sap Business Ai Platform (approuter)

CVE-2026-76963

Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal system details, resulting in low impact on confidentiality while integrity and availability remain unaffected.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap Netweaver And Abap Platform

CVE-2026-66766

Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)

SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could exhaust system resources and make the service unavailable, resulting in a high impact on availability. There is no impact on confidentiality and integrity.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap S/4hana (manage Supply Protection)

CVE-2026-58243

Privilege Escalation vulnerability in SAP ABAP Developer Tools

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could allow the attacker to read sensitive data, modify application data, and disrupt access for legitimate users, resulting in high impact on confidentiality, integrity, and availability.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap Abap Developer Tools

CVE-2026-34265

Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap Netweaver And Abap Platform

CVE-2026-40130

Memory Corruption vulnerability in SAPSPrint Service

SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sapsprint Service

CVE-2026-44762

Security Misconfiguration in SAP Data Services Management Console

SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicious scripts within the application's context. Successful exploitation may result in a low impact on confidentiality and integrity, with no impact on the availability of the application.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap Data Services Management Console

CVE-2026-58235

Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services)

SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected component, though no specific exploit is currently known. Successful exploitation could result in low impact on confidentiality, integrity, and availability of the system.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap Netweaver As Java (adobe Document Services)

CVE-2026-58236

OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform

SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an internal code path leading to operating system command execution. Successful exploitation could allow the attacker to execute OS-level commands that write to the operating system or stop the SAP system, resulting in no impact on confidentiality, low impact on integrity, and high impact on availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap Netweaver Application Server Abap And Abap Platform

CVE-2026-66763

Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high privileges and local access to the server could retrieve these objects and decrypt the stored credentials. Successful exploitation could allow the attacker to obtain sensitive authentication data and modify protected information, resulting in a high impact on confidentiality and integrity. There is no impact on availability.

CVSS 3.1 · 7.9 High EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap Business Objects Business Intelligence Platform