[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-66768":6},{"stargazers_count":4,"fetched_at":5},7,"2026-09-08T09:01:12.952Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":24,"related":25,"reserved_at":9,"published_at":26,"modified_at":26,"state":27,"summary":28,"references_raw":35,"kevs":45,"epss":9,"epss_history":46,"metrics":47,"affected":55},"CVE-2026-66768","SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected functionality. This could allow arbitrary command execution on the victim's machine, leading to a high impact on the confidentiality, integrity, and availability of the affected system.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-807","Reliance on Untrusted Inputs in a Security Decision","The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.","weakness","Incomplete","Base","High",[],[],[],[],[],[],[],"2026-09-08T00:11:15.666Z","Received",{"cisa_kev":29,"cisa_ransomware":29,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":30,"severity_score":31,"severity_version":32,"severity_source":33,"severity_vector":34,"severity_status":27},false,"critical",9,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",[36,41],{"url":37,"sources":38,"tags":40},"https://me.sap.com/notes/3781729",[33,39],"nvd",[],{"url":42,"sources":43,"tags":44},"https://url.sap/sapsecuritypatchday",[33,39],[],[],[],[48,53],{"source":33,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":49,"cvss_v4_0":9},{"baseScore":31,"baseSeverity":50,"vectorString":34,"impactScore":51,"exploitabilityScore":52},"CRITICAL",10,5.9,{"source":39,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":54,"cvss_v4_0":9},{"baseScore":31,"baseSeverity":50,"vectorString":34,"impactScore":51,"exploitabilityScore":52},[56],{"ecosystem":9,"name":57,"vendor":58,"product":59,"cpe_part":60,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":61},"SAP NetWeaver (SAP GUI for Java)","sap_se","sap netweaver (sap gui for java)","a",[62],{"version":63,"is_range":29,"range_type":33,"version_start":63,"version_start_type":64,"version_end":63,"version_end_type":64,"fixed_in":9},"BC-FES-JAV 8.10","including"]