CVE-2026-27690

Name of the Vulnerable Software and Affected Versions SAP Approuter (affected versions not specified)

Description An unauthenticated attacker can exploit an HTTP Request Smuggling issue by sending a specially crafted HTTP request. This leads to request-response desynchronization, a condition where the front-end and back-end servers disagree on the boundaries of a request, potentially allowing an attacker to interfere with other users' requests. This can result in the exposure of user responses and cause the system to become unavailable, impacting confidentiality and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.