SAP Approuter Vulnerable to HTTP Request Smuggling

Description

References

• nvd.nist.gov/vuln/detail/CVE-2026-27690 · ADVISORY
• me.sap.com/notes/3720138 · WEB
• url.sap/sapsecuritypatchday · WEB

Autres vulnérabilités de approuter

• CVE-2026-66778MOYENNE 5.3SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated at…
• CVE-2026-66777MOYENNE 5.9SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity…
• CVE-2026-66776MOYENNE 5.9SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An …
• CVE-2026-66775MOYENNE 4.3SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated attacker coul…
• CVE-2026-66774FAIBLE 3.7SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default …