CVE-2026-66760
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges, holding a certificate from the same trusted authority with matching subject values, could bypass the identity check. Successful exploitation could allow impersonation of a trusted internal component, resulting in a high impact on integrity and a low impact on confidentiality and availability.
Risk Assessment
The risk includes the possibility of impersonating a trusted component, which could lead to unauthorized changes in the system and compromise data integrity.
Recommendation
It is recommended to strengthen client certificate validation in SAP Approuter, including checking the full trust chain and certificate attributes, and apply vendor patches.
Original NVD description (English source)
SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges, holding a certificate from the same trusted authority with matching subject values, could bypass the identity check. This complexity makes the attack difficult to execute. Successful exploitation could allow impersonation of a trusted internal component, resulting in a high impact on integrity and a low impact on confidentiality and availability.