CVE-2026-58238: sap_se sap business ai platform (approuter)

Vulnerability summary

CVE-2026-58238 is a medium (CVSS 5.9) vulnerability in sap_se sap business ai platform (approuter). EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 36% of scored vulnerabilities.

Timeline

1. 11-08-2026
   PublishedVulnerability first disclosed.
2. 11-08-2026
   Last modifiedVulnerability information updated.

Description

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex to execute. This results in a high impact on availability. There is no impact on confidentiality and integrity.

• CWE-770Allocation of Resources Without Limits or ThrottlingThe product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.