SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a specially crafted token to cause sensitive credential material to be sent to an attacker-controlled d…
Exact source revision recorded 5 Nov 2026 12:40:28 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2026-55866
PublishedEUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Aug 11, 2026, 12:12:16 AM
dateUpdated: Aug 11, 2026, 2:32:14 PM
1 related source bulletins · separate from aliases
WID-SEC-W-2026-2746: SAP Patch Day August 2026: Mehrere Schwachstellen
CVE-2026-34265 · CVE-2026-40130 · CVE-2026-44758 · CVE-2026-44762 · CVE-2026-44763 · CVE-2026-44764 · CVE-2026-44765 · CVE-2026-58230 · CVE-2026-58231 · CVE-2026-58235 · CVE-2026-58236 · CVE-2026-58237 · CVE-2026-58238 · CVE-2026-58239 · CVE-2026-58241 · CVE-2026-58243 · CVE-2026-58244 · CVE-2026-58245 · CVE-2026-58247 · CVE-2026-58248 · CVE-2026-66760 · CVE-2026-66761 · CVE-2026-66763 · CVE-2026-66764 · CVE-2026-66770 · CVE-2026-66771 · CVE-2026-66772 · CVE-2026-66773 · CVE-2026-66774 · CVE-2026-66775 · CVE-2026-66776 · CVE-2026-66777 · CVE-2026-66778 · CVE-2026-66779
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON