CVE-2026-66775

Name of the Vulnerable Software and Affected Versions SAP Approuter (affected versions not specified)

Description SAP Approuter does not enforce cross-site request forgery (CSRF) protection on the authentication flow by default. CSRF is a type of attack that tricks a victim into submitting a malicious request. An unauthenticated attacker could craft a malicious link and trick a victim into following it, allowing the attacker to bind the victim's session to an identity controlled by the attacker. This results in a low impact on integrity, with no impact on confidentiality or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.