SAP Approuter Vulnerable to HTTP Request Smuggling

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2026-27690 · ADVISORY
• me.sap.com/notes/3720138 · WEB
• url.sap/sapsecuritypatchday · WEB

Lỗ hổng khác của approuter

• CVE-2026-66778TRUNG BÌNH 5.3SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated at…
• CVE-2026-66777TRUNG BÌNH 5.9SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity…
• CVE-2026-66776TRUNG BÌNH 5.9SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An …
• CVE-2026-66775TRUNG BÌNH 4.3SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated attacker coul…
• CVE-2026-66774THẤP 3.7SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default …