SAP Security

Security illustration depicting CVE-2026-27690, a critical HTTP Request Smuggling vulnerability affecting SAP Approuter deployments.

SAP Security

CVE-2026-27690: Critical HTTP Request Smuggling Vulnerability in SAP Approuter

CVE-2026-27690 is a critical HTTP Request Smuggling vulnerability affecting SAP Approuter in non-Cloud Foundry environments. This article explains the risk, affected systems, and how to deploy the required fixes.

Illustration of the SAP Commerce CVE-2026-44761 vulnerability involving the default trusted_client OAuth client credentials.

SAP

CVE-2026-44761 Explained: How to Find and Remove the Dangerous trusted_client OAuth Client in SAP Commerce

CVE-2026-44761 is a critical SAP Commerce vulnerability (CVSS 9.1) caused by publicly documented OAuth sample credentials. Learn how to identify vulnerable trusted_client configurations, verify your system, and remediate the issue without downtime.