CVE-2026-44745 is a vulnerability in SAP Approuter where improper validation of request headers during the OAuth2 login flow allows an unauthenticated remote attacker to perform URL redirection to untrusted sites. This can be exploited by crafting malicious links that, when used by victims, may result in unauthorized access compromising confidentiality and integrity of the application. The CVSS 3.1 base score is 8.1, indicating high severity. No official remediation or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation can lead to unauthorized access, impacting the confidentiality and integrity of the SAP Approuter application. There is no impact on availability. This could allow attackers to redirect users to malicious sites, potentially facilitating further attacks or data compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should exercise caution with links related to SAP Approuter OAuth2 login flows and consider additional monitoring or controls for suspicious redirection behavior.