CVE-2026-58230

Name of the Vulnerable Software and Affected Versions SAP Approuter (affected versions not specified)

Description SAP Approuter fails to sufficiently validate certain token content under specific configurations. An unauthenticated attacker can send a specially crafted token to force the transmission of sensitive credential material to a destination controlled by the attacker. This issue requires non-default preconditions in the target environment, resulting in high attack complexity, high impact on confidentiality, and low impact on integrity and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.