Vulnerability in SAP Se Saprouter On Microsoft Windows
CVE-2026-0487
SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impact on confidentiality, integrity and availability of the system.
EPSS: 0.002 (11.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Sap_se Saprouter On Microsoft Windows — versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-0487?
- CVE-2026-0487 is a high-severity vulnerability in SAP Se Saprouter On Microsoft Windows, classified under Uncontrolled Search Path Element. CVSS score: 8.4/10. Published 2026-07-14.
- How severe is CVE-2026-0487?
- High severity. CVSS v3 base score is 8.4 out of 10.