Vulnerabilities CVE-2026-27690

CVE-2026-27690

Critical

Open

TLP:CLEAR

HTTP Request Smuggling in SAP Approuter

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailable. This leads to a high impact on confidentiality and availability.

Details

CVSS Score: 9.1
EPSS Score ⓘ: 0.69%

49.5th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Confidence: 90%
Published: Jul 14, 2026
Last Modified: Jul 14, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.