Vulnerability in SAP Se Saprouter On Microsoft Windows

CVE-2026-0487

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impact on confidentiality, integrity and availability of the system.

EPSS: 0.002 (11.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-0487?
CVE-2026-0487 is a high-severity vulnerability in SAP Se Saprouter On Microsoft Windows, classified under Uncontrolled Search Path Element. CVSS score: 8.4/10. Published 2026-07-14.
How severe is CVE-2026-0487?
High severity. CVSS v3 base score is 8.4 out of 10.