low3.7
CVE-2026-66774
SAP Approuter does not consistently handle certain error conditions.
Impact
SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation is highly complex, as it depends on conditions outside the attacker's control. This could result in a low impact on availability. There is no impact on confidentiality and integrity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Approuter | before 23.0.0 |