Description
Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailable. This leads to a high impact on confidentiality and availability.
Published: 2026-07-14
Score: 9.1 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in the HTTP request parsing of SAP Approuter enables an unauthenticated attacker to send a specially crafted request that causes request‑response desynchronization. This smuggling can expose private user responses and disrupt normal operation, leading to significant loss of confidentiality and availability for systems using the router.

Affected Systems

The vulnerability affects SAP Approuter components provided by SAP SE. No specific version range is defined in the advisory.

Risk and Exploitability

The flaw carries a CVSS score of 9.1, indicating a very high severity. Exploitation is possible over the network using standard HTTP, requiring no authentication. EPSS information is missing, and the issue is not listed in CISA KEV, so active exploitation risk depends on the deployment of unauthenticated interfaces.

Generated by OpenCVE AI on July 14, 2026 at 12:48 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the official SAP patch described in SAP Note 3720138.
  • Reconfigure the Approuter to enforce strict RFC‑7230 compliant request parsing and reject ambiguous pipelined requests.
  • Deploy traffic monitoring to detect and alert on suspicious request patterns that could indicate smuggling attempts.

Generated by OpenCVE AI on July 14, 2026 at 12:48 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 14 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 14 Jul 2026 01:00:00 +0000

Type Values Removed Values Added
Description Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailable. This leads to a high impact on confidentiality and availability.
Title HTTP Request Smuggling in SAP Approuter
Weaknesses CWE-444
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: sap

Published:

Updated: 2026-07-14T12:46:07.535Z

Reserved: 2026-02-23T17:50:17.028Z

Link: CVE-2026-27690

cve-icon Vulnrichment

Updated: 2026-07-14T12:45:45.866Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-14T13:00:04Z

Weaknesses
  • CWE-444

    Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')