CVE-2026-66774: sap_se sap business ai platform (approuter)

Vulnerability summary

CVE-2026-66774 is a low (CVSS 3.7) vulnerability in sap_se sap business ai platform (approuter). EPSS estimates a 0.35% chance of exploitation in the next 30 days, higher than 27.7% of scored vulnerabilities.

Timeline

1. 11-08-2026
   PublishedVulnerability first disclosed.
2. 11-08-2026
   Last modifiedVulnerability information updated.

Description

SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation is highly complex, as it depends on conditions outside the attacker's control. This could result in a low impact on availability. There is no impact on confidentiality and integrity.

• CWE-754Improper Check for Unusual or Exceptional ConditionsThe product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.