CVE-2026-66761: Multiple vulnerabilities in SAP Business AI Platform (Approuter)

Published Aug 11, 2026

Updated

SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high volumes of data without consuming responses, causing unbounded memory growth. This results in a low impact on availability. There is no impact on confidentiality and integrity.

Affected Software

1 affected component

SAP SAP Business AI Platform (Approuter)

Event History

Aug 11, 2026

CVE Published

via MITRE·12:17 AM

Data Sourced

via MITRE·12:17 AM

DescriptionSeverity

Frequently Asked Questions

What is the severity of CVE-2026-66761?

The severity of CVE-2026-66761 is medium with a score of 4.3.

How do I fix CVE-2026-66761?

To fix CVE-2026-66761, you should apply the security patches provided by SAP for the Business AI Platform.

What are the potential impacts of CVE-2026-66761?

CVE-2026-66761 could lead to unbounded memory growth, causing a low impact on availability.

Who is affected by CVE-2026-66761?

CVE-2026-66761 affects users of the SAP Business AI Platform (Approuter) with low privileges.

What type of vulnerability is CVE-2026-66761?

CVE-2026-66761 is classified as a flow control vulnerability in the SAP Approuter.

CVE-2026-66761: Multiple vulnerabilities in SAP Business AI Platform (Approuter)

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-66761?

How do I fix CVE-2026-66761?

What are the potential impacts of CVE-2026-66761?

Who is affected by CVE-2026-66761?

What type of vulnerability is CVE-2026-66761?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-66761?

How do I fix CVE-2026-66761?

What are the potential impacts of CVE-2026-66761?

Who is affected by CVE-2026-66761?

What type of vulnerability is CVE-2026-66761?