CVE-2026-58238: medium-severity vulnerability in SAP_SE SAP Business AI Platform (Approuter)
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.9epss 0.4%
SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex to execute. This results in a high impact on availability. There is no impact on confidentiality and integrity.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
SAP_SE · SAP Business AI Platform (Approuter)Related CVEs — SAP_SE SAP Business AI Platform (Approuter)
In the same product, most dangerous first.
CVE-2026-66777MEDIUMMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-66761MEDIUMMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-66778MEDIUMMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-66774LOWMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-58239LOWMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.3%CVE-2026-58230HIGHMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.3%