CVE-2026-0487 | SAProuter on Microsoft Windows allows an unauthenticated att… | CVSS 8.4 HIGH

Description

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impact on confidentiality, integrity and availability of the system.

Metadata

CVE ID: CVE-2026-0487
State: PUBLISHED
Assigner: sap
Reserved: 2025-12-09 22:06 UTC
Published: 2026-07-14 00:17 UTC
Last updated: 2026-07-14 00:17 UTC
Primary CWE: CWE-427
CWE-427: Uncontrolled Search Path Element
Vendor / Product: SAP_SE / SAProuter on Microsoft Windows
Sources: cve.org · NVD

Severity & Metrics

8.4 HIGH CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products (1)

Vendor	Product	Platform	Versions
SAP_SE	SAProuter on Microsoft Windows	—	KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.53 …

Weakness (CWE)

CWE	Source	Description
CWE-427	cna	CWE-427: Uncontrolled Search Path Element

CVSS scores (1)

Score	Severity	Version	Source	Vector
8.4	HIGH	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (2)