Content Injection Vulnerability in SAP Gateway

CVE-2026-44749

What is CVE-2026-44749?

The SAP Gateway has a vulnerability that allows attackers to inject custom content into error messages. This weakness can lead to the disclosure of sensitive request artefacts such as regex patterns, potentially compromising the URI parsing logic. While the confidentiality of the data is at risk due to this injection vulnerability, the integrity and availability of the SAP Gateway remain unaffected.

References