← Späť na vyhľadávanie CVE

CVE-2026-66766

SAP S/4HANA

Popis

SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could exhaust system resources and make the service unavailable, resulting in a high impact on availability. There is no impact on confidentiality and integrity.

CVSS 7.5EPSS 0.291%Riziko 0.77
Zobraziť zdroj
Zverejnené
2026-08-25 01:16:37
Dotknuté verzie
unknown
Typ
Webová aplikácia
Posledná úprava
2026-08-26 19:00:14
Vektor
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H