Pending AI Enrichment

This vulnerability was recently detected via the live feed and has not yet been processed by Precogs AI's context enrichment engine. The data below represents raw telemetric data.

RAW NVD TELEMETRY

CVE-2026-66777

CVSS Base Score
5.9 MEDIUM
Primary Weakness
CWE-22
Published Date
Aug 11, 2026
Data Source
NVD API

SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required conditions, an attacker with low privileges could send specially crafted requests to bypass authorization checks and reach protected resources beyond their assigned scope. Successful exploitation could allow the attacker to read sensitive data and perform limited modifications on protected resources, resulting in a high impact on confidentiality and a low impact on integrity. There is no impact on availability.

Related Vulnerabilitiesvia CWE-22

Is your system affected?

Precogs AI detects CVE-2026-66777 in compiled binaries, LLMs, and application layers — even without source code access.