What is CVE-2026-58238?

CVE-2026-58238 is a medium-severity vulnerability in Sap_se Sap Business Ai Platform (Approuter), classified under Allocation of Resources Without Limits or Throttling. CVSS score: 5.9/10. Published 2026-08-11.

How severe is CVE-2026-58238?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Resource exhaustion in Sap_se Sap Business Ai Platform (Approuter)

CVE-2026-58238

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific…

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Sap_se Sap Business Ai Platform (Approuter) — versions SAP Approuter node.js package < 23.0.0

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

Frequently asked questions

What is CVE-2026-58238?: CVE-2026-58238 is a medium-severity vulnerability in Sap_se Sap Business Ai Platform (Approuter), classified under Allocation of Resources Without Limits or Throttling. CVSS score: 5.9/10. Published 2026-08-11.
How severe is CVE-2026-58238?: Medium severity. CVSS v3 base score is 5.9 out of 10.