8.4
CVE-2026-0487
- EPSS 0.16%
- Veröffentlicht 14.07.2026 00:17:37
- Zuletzt bearbeitet 20.07.2026 16:16:53
- Erkennungen
DLL Hijacking vulnerability in SAProuter on Microsoft Windows
SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impact on confidentiality, integrity and availability of the system.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerSAP_SE
≫
Produkt
SAProuter on Microsoft Windows
Default Statusunaffected
Version
KRNL64NUC 7.22
Status
affected
Version
7.22EXT
Status
affected
Version
KRNL64UC 7.22
Status
affected
Version
7.53
Status
affected
Version
SAP_ROUTER 7.53
Status
affected
Version
7.54
Status
affected
Version
KERNEL 7.22
Status
affected
Version
7.77
Status
affected
Version
7.89
Status
affected
Version
7.93
Status
affected
Version
9.16
Status
affected
Version
9.17
Status
affected
Version
9.18
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.054 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| SAP | 8.4 | 2.5 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-427 Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://url.sap/sapsecuritypatchday
https://me.sap.com/notes/3692165
https://github.com/piuppi/Proof-of-Concepts/blob/main/SAP/CVE-2026-0487.md