CVE-2026-66776: CWE-347: Improper Verification of Cryptographic Signature in SAP_SE SAP Business AI Platform (Approuter)
SAP Business AI Platform (Approuter) has a vulnerability where it does not consistently enforce integrity verification on certain session-related request headers. An attacker with low privileges who has previously observed matching session values out-of-band could exploit this to load another user's session context. This vulnerability impacts confidentiality highly and integrity to a lesser extent, with no effect on availability. The attack is complex due to the prerequisite of prior session value observation.
AI Analysis
Technical Summary
CVE-2026-66776 describes an improper verification of cryptographic signatures (CWE-347) in SAP Business AI Platform's Approuter component. Specifically, the product fails to consistently enforce integrity checks on some session-related request headers under certain conditions. This flaw allows an attacker with low privileges, who has previously observed session values externally, to bypass integrity checks and impersonate another user's session context. The vulnerability has a CVSS 3.1 base score of 5.9, reflecting medium severity, with a high impact on confidentiality and low impact on integrity, and no availability impact.
Potential Impact
Successful exploitation could lead to unauthorized access to another user's session context, compromising confidentiality significantly. Integrity is affected to a lesser degree, while availability remains unaffected. The attack complexity is high due to the need for prior observation of session values outside the system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Organizations should monitor SAP advisories for updates and apply any future patches promptly.
CVE-2026-66776: CWE-347: Improper Verification of Cryptographic Signature in SAP_SE SAP Business AI Platform (Approuter)
Description
SAP Business AI Platform (Approuter) has a vulnerability where it does not consistently enforce integrity verification on certain session-related request headers. An attacker with low privileges who has previously observed matching session values out-of-band could exploit this to load another user's session context. This vulnerability impacts confidentiality highly and integrity to a lesser extent, with no effect on availability. The attack is complex due to the prerequisite of prior session value observation.
CVSS v3.1
Score 5.9medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-66776 describes an improper verification of cryptographic signatures (CWE-347) in SAP Business AI Platform's Approuter component. Specifically, the product fails to consistently enforce integrity checks on some session-related request headers under certain conditions. This flaw allows an attacker with low privileges, who has previously observed session values externally, to bypass integrity checks and impersonate another user's session context. The vulnerability has a CVSS 3.1 base score of 5.9, reflecting medium severity, with a high impact on confidentiality and low impact on integrity, and no availability impact.
Potential Impact
Successful exploitation could lead to unauthorized access to another user's session context, compromising confidentiality significantly. Integrity is affected to a lesser degree, while availability remains unaffected. The attack complexity is high due to the need for prior observation of session values outside the system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Organizations should monitor SAP advisories for updates and apply any future patches promptly.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- sap
- Date Reserved
- 2026-07-27T17:33:56.949Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a7a6fdebf8831d539db4b8a
Added to database: 08/11/2026, 00:42:06 UTC
Last enriched: 08/11/2026, 00:57:08 UTC
Last updated: 08/11/2026, 01:01:05 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.