Pending AI Enrichment

This vulnerability was recently detected via the live feed and has not yet been processed by Precogs AI's context enrichment engine. The data below represents raw telemetric data.

RAW NVD TELEMETRY

CVE-2026-66776

CVSS Base Score
5.9 MEDIUM
Primary Weakness
CWE-347
Published Date
Aug 11, 2026
Data Source
NVD API

SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An attacker with low privileges could send a specially crafted request that bypasses the integrity check and loads another user's session context. Successful exploitation requires the attacker to have previously observed matching session values out-of-band, which makes the attack complex to execute. This could result in a high impact on confidentiality and a low impact on integrity. There is no impact on availability.

Related Vulnerabilitiesvia CWE-347

CVE-2026-44788.1 HIGH

A vulnerability was identified in Yi Technology YI Home Camera 2 2.

CWE-345CWE-347
CVE-2026-322944.7 MEDIUM

JetKVM prior to 0.

CWE-345CWE-347
CVE-2026-35649 CRITICAL

A condition in ScreenConnect may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios.

CWE-347
CVE-2026-42587.5 HIGH

All versions of the package sjcl are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.

CWE-347CWE-325
CVE-2026-279629.1 CRITICAL

Authlib is a Python library which builds OAuth and OpenID Connect servers.

CWE-347
CVE-2026-35620 UNKNOWN

Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability.

CWE-347

Is your system affected?

Precogs AI detects CVE-2026-66776 in compiled binaries, LLMs, and application layers — even without source code access.

Request Deep AnalysisBook a demo