CVE-2026-44745

Name of the Vulnerable Software and Affected Versions SAP Approuter (affected versions not specified)

Description SAP Approuter fails to properly validate incoming request headers during the OAuth2 login flow under specific configurations. This flaw allows an unauthenticated remote attacker to craft a malicious link that, if clicked by a victim, can lead to unauthorized access to protected information, impacting confidentiality and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.