Critical severity9.1NVD Advisory· Published Jul 14, 2026· Updated Sep 8, 2026
CVE-2026-27690
CVE-2026-27690
Description
Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailable. This leads to a high impact on confidentiality and availability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
@sap/approuternpm | < 20.10.0 | 20.10.0 |
Affected products
1Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-8m85-wqg7-c529ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-27690ghsaADVISORY
- url.sap/sapsecuritypatchdaynvdVendor AdvisoryWEB
- me.sap.com/notes/3720138nvdPermissions RequiredWEB
News mentions
0No linked articles in our index yet.