CVE-2026-66760

SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges, holding a certificate from the same trusted authority with matching subject values, could bypass the identity check. This complexity makes the attack difficult to execute. Successful exploitation could allow impersonation of a trusted internal component, resulting in a high impact on integrity and a low impact on confidentiality and availability.

Score
CVSS 3.1 6.4 Medium
Status
Analyzed - cna@sap.com
Published
2026-08-11
Last modified
2026-10-24
Weaknesses
CWE-295

Affected products

References

 
 
© AVABIS GmbH privacypolicy about