CVE-2026-66760

SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges, holding a certificate from the same trusted authority with matching subject values, could bypass the identity check. This complexity makes the attack difficult to execute. Successful exploitation could allow impersonation of a trusted internal component, resulting in a high impact on integrity and a low impact on confidentiality and availability.

CVSS 3.1

6.4CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

EPSS

0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-25)

CWE

CWE-295

Published

2026-08-11

Modified

2026-10-24

Record from

the NVD, synced 2026-10-24

Affected

• sap:approuter

References

• https://me.sap.com/notes/3786038
• https://url.sap/sapsecuritypatchday

Check your stackJSON