What is CVE-2026-66761?

CVE-2026-66761 is a medium-severity vulnerability in Sap_se Sap Business Ai Platform (Approuter), classified under Allocation of Resources Without Limits or Throttling. CVSS score: 4.3/10. Published 2026-08-11.

How severe is CVE-2026-66761?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Resource exhaustion in Sap_se Sap Business Ai Platform (Approuter)

CVE-2026-66761

SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high volumes of data without consuming responses, causing unbounded memory growth. This results in a low impact on…

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

Sap_se Sap Business Ai Platform (Approuter) — versions SAP Approuter node.js package < 23.0.0

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

Frequently asked questions

What is CVE-2026-66761?: CVE-2026-66761 is a medium-severity vulnerability in Sap_se Sap Business Ai Platform (Approuter), classified under Allocation of Resources Without Limits or Throttling. CVSS score: 4.3/10. Published 2026-08-11.
How severe is CVE-2026-66761?: Medium severity. CVSS v3 base score is 4.3 out of 10.