Security News Jul 14, 2026 by vuln.today Threat Intelligence

Critical HTTP Request Smuggling in SAP Approuter - CVE-2026-27690

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full article requires sign-in

Access weekly reports, audio discussions, threat analysis, and CVE breakdowns.

Related CVEs

CVE-2026-27690

Related Vulnerability Groups

SAP Approuter Request Smuggling and Redirect Flaws CRITICAL

2 CVEs

Other CVEs in Same Group

CVE-2026-44745 HIGH 8.1

Unauthorized access in SAP Approuter arises because the component fails to validate incoming request headers during the OAuth2 login flow under certain configurations (CWE-601, open redirect). An unauthenticated remote attacker who lures a victim into clicking a crafted link can hijack the authentication flow to gain high-confidentiality and high-integrity access to the application. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the network-reachable, low-complexity nature (CVSS 8.1) makes it a meaningful patch priority for SAP BTP/Cloud Foundry environments.