Denial of Service Vulnerability in SAP Approuter

CVE-2026-58238

What is CVE-2026-58238?

The SAP Approuter vulnerability arises from its inadequate handling of specific requests, allowing unauthenticated attackers to send crafted input that causes the component to crash and restart. While the exploitation is complex and requires particular runtime conditions, successful attacks can significantly disrupt service availability without affecting data confidentiality or integrity. It's critical for organizations using SAP Approuter to understand these risks and implement appropriate security measures to mitigate potential disruptions.

References