CVE-2026-66761
Received Received - Intake

Memory Exhaustion in SAP Approuter

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: SAP SE

Description
SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high volumes of data without consuming responses, causing unbounded memory growth. This results in a low impact on availability. There is no impact on confidentiality and integrity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-66761
EUVD
EUVD-2026-55879

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sap approuter *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

SAP Approuter has a flaw where it does not properly limit data flow in certain functions. An attacker with low-level access can send excessive amounts of data without receiving responses, leading to uncontrolled memory consumption. This primarily affects system availability.

Impact Analysis

This vulnerability could cause your SAP Approuter to slow down or crash due to excessive memory usage. It may disrupt services relying on the Approuter but does not expose data or allow unauthorized changes.

Compliance Impact

This issue primarily impacts availability and does not involve data breaches or integrity violations. Compliance impact is likely minimal unless service disruption violates specific availability requirements in GDPR or HIPAA.

Mitigation Strategies

Apply the latest security patches or updates provided by SAP for Approuter to address the insufficient flow control issue. Monitor system memory usage for unbounded growth as an indicator of potential exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66761. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart