CVE-2026-66766

Name of the Vulnerable Software and Affected Versions SAP S/4HANA (Private Cloud) (affected versions not specified)

Description SAP S/4HANA (Private Cloud) utilizes a third-party component susceptible to a Regular Expression Denial of Service (ReDoS), a condition where a specially crafted input causes the regular expression engine to take an exponential amount of time to process, leading to system exhaustion. An unauthenticated attacker can provide malicious input to trigger excessive processing, which may exhaust system resources and render the service unavailable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.