HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-58230 — SAP Approuter does not sufficiently validate certain token content under specifi...

·Source: NIST NVD

Updated:

Executive Summary

SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a specially crafted token to cause sensitive credential material to be sent to an attacker-controlled destination. The attack complexity is high due to non-default preconditions required in the target environment. This results in a high impact on confidentiality

Analysis

SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a specially crafted token to cause sensitive credential material to be sent to an attacker-controlled destination. The attack complexity is high due to non-default preconditions required in the target environment. This results in a high impact on confidentiality and a low impact on integrity and availability. CVSS Score: 7. Published: 2026-08-11T01:17:21.307.

Indicators of Compromise (1)

CVE (1)
CVE-2026-58230
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Stripe agrees $7bn takeover of AI firm OpenRouter - Bloomberg

Payments giant Stripe has struck a $7 billion deal to acquire AI gateway keeper OpenRouter, according to Bloomberg.

Finextra
MEDIUMVulnerability

Unleashing Hackers to Be the US Government's Bounty Hunters

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/unleashing-hackers-to-be-us-governments-bounty-hunters-image_small-9-a-32585.jpg" align=right hspace=4><b>Trump Presidential Memo a Risky Proposition for Corporations and the Internet</b><br>Even those who support a White House push to involve the private sector in offensive cyber operations against foreign online crime groups adm

Bank Info Security
HIGHVulnerability

CISA KEV: Ray-Project Ray — Ray-Project Ray Code Injection Vulnerability

Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.

CVE-2025-62593Ray-Project Ray
CISA KEV