CVE-2026-66773
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application, which may lead to a high impact on confidentiality and low impact on integrity, with no impact on availability.
Risk Assessment
The risk includes disclosure of authentication credentials and potential data manipulation in the application, which could compromise system security.
Recommendation
Conduct regular audits of OData services, monitor for compromise, and apply security policies for external integrations.
Original NVD description (English source)
A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application, which may leads to a high impact on confidentiality and low impact on integrity and no impact on Availability.