CVE-2026-66774: low-severity vulnerability in SAP_SE SAP Business AI Platform (Approuter)
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.7epss 0.4%
SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation is highly complex, as it depends on conditions outside the attacker's control. This could result in a low impact on availability. There is no impact on confidentiality and integrity.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
SAP_SE · SAP Business AI Platform (Approuter)Related CVEs — SAP_SE SAP Business AI Platform (Approuter)
In the same product, most dangerous first.
CVE-2026-66777MEDIUMMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-58238MEDIUMMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-66761MEDIUMMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-66778MEDIUMMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.4%CVE-2026-58239LOWMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.3%CVE-2026-58230HIGHMultiple vulnerabilities in SAP Business AI Platform (Approuter)EPSS 0.3%