Skip to content
Threat Feed
Subscribe

Product

SAP Approuter Node.js Package

1 brief RSS
medium advisory

SAP Approuter HTTP Request Smuggling Vulnerability Allows Confidentiality and Availability Impact (CVE-2026-27690)

An HTTP Request Smuggling vulnerability (CVE-2026-27690, CWE-444) in SAP Approuter allows an unauthenticated attacker to send a specially crafted HTTP request leading to request-response desynchronization, which can result in the exposure of user responses and cause a denial of service by making the system unavailable.

SAP Approuter node.js package http-request-smuggling vulnerability sap web-application denial-of-service data-exposure
3t 1c