CVE-2026-58238
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex to execute. This results in a high impact on availability, with no impact on confidentiality and integrity.
Risk Assessment
The risk is the potential to cause crashes and unavailability of the component, which could disrupt application operations.
Recommendation
It is recommended to strengthen request handling in SAP Approuter, implement protection mechanisms against overload, and apply security patches.
Original NVD description (English source)
SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex to execute. This results in a high impact on availability. There is no impact on confidentiality and integrity.