CVE-2026-66766

7.5 Élevée

Publiée le 25/08/2026 à 03:16 · Modifiée le 12/10/2026 à 17:10 · En attente d'analyse NVD · Source : cna@sap.com

Description

SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could exhaust system resources and make the service unavailable, resulting in a high impact on availability. There is no impact on confidentiality and integrity.

Traduire en français

Produits concernés

SAP_SE SAP S/4HANA (Manage Supply Protection)

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	cna@sap.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-1333

Références

https://me.sap.com/notes/3771065
https://url.sap/sapsecuritypatchday

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories