Medium severity4.3NVD Advisory· Published Aug 11, 2026· Updated Aug 26, 2026
CVE-2026-66772
CVE-2026-66772
Description
SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on certain administrative functionality. An attacker authenticated as a non-administrative user could bypass this restriction to gain limited information about affected functionality. This results in a low impact on confidentiality. There is no impact on integrity and availability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
2- Critical SAP Vulnerabilities Let Attackers Inject Malicious Code and Corrupt MemoryCyber Security News · Aug 11, 2026
- SAP: 25 Vulnerabilities Disclosed, Critical Commerce Cloud Flaw Actively ExploitedVypr Intelligence · Aug 11, 2026