AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SAPCVE-2026-0487

SAProuter on Microsoft Windows: remote code execution

SAP

CVE-2026-0487 · Published Jul 14, 2026 · updated Jul 20, 2026

High8.4
No fix yet
SAP advisory

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impact on confidentiality, integrity and availability of the system.

Affected versions

PackageAffectedFixed in
SAProuter on Microsoft Windows
Product
<= KRNL64NUC 7.22No fix yet
<= 7.22EXTNo fix yet
<= KRNL64UC 7.22No fix yet
<= 7.53No fix yet
Details and references

More SAP advisories

All SAP