CVE-2026-66777

Name of the Vulnerable Software and Affected Versions SAP Approuter (affected versions not specified)

Description SAP Approuter fails to sufficiently validate certain incoming requests before forwarding them to backend destinations. An attacker with low privileges can send specially crafted requests to bypass authorization checks, allowing access to protected resources outside their assigned scope. This can lead to the unauthorized reading of sensitive data and limited modifications of protected resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.