What is CVE-2026-0487?

CVE-2026-0487 is a high-severity vulnerability in Sap_se Saprouter On Microsoft Windows, classified under Uncontrolled Search Path Element. CVSS score: 8.4/10. Published 2026-07-14.

How severe is CVE-2026-0487?

High severity. CVSS v3 base score is 8.4 out of 10.

Vulnerability in Sap_se Saprouter On Microsoft Windows

CVE-2026-0487

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading proce…

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sap_se Saprouter On Microsoft Windows — versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

cna@sap.com
cna@sap.com

Frequently asked questions

What is CVE-2026-0487?: CVE-2026-0487 is a high-severity vulnerability in Sap_se Saprouter On Microsoft Windows, classified under Uncontrolled Search Path Element. CVSS score: 8.4/10. Published 2026-07-14.
How severe is CVE-2026-0487?: High severity. CVSS v3 base score is 8.4 out of 10.