THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-27690 (CRITICAL 9.1) — Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailabl

[NVD] CVE-2026-27690 (CRITICAL 9.1) — Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailabl

lownvdPublished 2026-07-14

CVE-2026-27690 CVSS: 9.1 CRITICAL Published: 2026-07-14T01:16:17.193

Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailable. This leads to a high impact on confidentiality

Indicators of compromise

CVE-2026-27690cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-27690