{"vulnerability": "cve-2026-27690", "sightings": [{"uuid": "88011d0a-405f-4e76-9e3d-97cc060b6fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqkymet66f2b", "content": "CVE-2026-27690 - sap approuter\nAn attacker can send a special request to SAP Approuter, potentially exposing user responses and making the system unavailable. This is a serious issue because it affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sapapprouter #sapse #CVE #infosec", "creation_timestamp": "2026-07-14T00:54:07.134760Z"}, {"uuid": "3744940e-934d-489e-bdb1-15067bd813ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql3r2jehe26", "content": "CVE-2026-27690 - HTTP Request Smuggling in SAP Approuter\nCVE ID : CVE-2026-27690\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafte...", "creation_timestamp": "2026-07-14T01:50:22.725463Z"}, {"uuid": "96eef161-0088-4b78-8ddf-59233cb5646f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mql7p4eot62k", "content": "\ud83d\udd34 CVE-2026-27690 - Critical (9.1)\n\nDue to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker coul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27690/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T03:00:52.862961Z"}, {"uuid": "bc4aebb1-a8eb-46b5-a609-33dcd4d6eafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116916448461094889", "content": "CVE-2026-27690: CRITICAL HTTP request smuggling flaw in SAP Approuter (CVSS 9.1). Remote attackers can cause desynchronization, exposing user responses & disrupting availability. No patch yet \u2014 monitor SAP advisories. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #InfoSec", "creation_timestamp": "2026-07-14T04:30:25.758605Z"}, {"uuid": "bf472dfa-623c-4c7d-8ca3-9bad64449c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqlepceb3g2f", "content": "CVE-2026-27690: SAP Approuter faces CRITICAL HTTP request smuggling (CVSS 9.1). Unauthenticated attackers can expose user data & disrupt services. No patch \u2014 monitor SAP for updates. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #...", "creation_timestamp": "2026-07-14T04:30:30.982493Z"}, {"uuid": "b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjvxlep22", "content": "Daily IT Security Digest \u2014 2026-07-14\n# Daily IT Security Digest \u2014 2026-07-14\n\n## 1. CRITICAL \u2014 SAP Approuter HTTP Request Smuggling (CVE-2026-27690, CVSS 9.1)\nA critical HTTP request smuggling flaw was disclosed in SAP Approuter, scored 9.1 on the CVSS v3.1 scale. Remote attackers can exploit the", "creation_timestamp": "2026-07-14T05:03:14.144599Z"}, {"uuid": "4fa38082-4a52-474b-b970-cbb25b2791e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjwjtly2o", "content": "Daily IT Security Digest \u2014 2026-07-14\nconfigurations as a mitigation.\nSources: https://infosec.exchange/@offseq/116916448461094889 \u00b7 https://radar.offseq.com/threat/cve-2026-27690\n\n## 2. CRITICAL \u2014 Chrome 150 Patches 27 Vulnerabilities Including 2 Use-After-Free Bugs\nGoogle Chrome 150 addresses 27", "creation_timestamp": "2026-07-14T05:03:14.627990Z"}, {"uuid": "aedbe625-2ee8-482e-b242-26a3e2d4b407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116918218287332576", "content": "SAP July 2026 patch day delivers CRITICAL fixes: NetWeaver (CVE-2026-44747, memory corruption), Approuter (CVE-2026-27690, HTTP smuggling), Commerce Cloud (CVE-2026-44761, hardcoded creds). Patch ASAP. https://radar.offseq.com/threat/sap-patches-critical-vulnerabilities-in-netweaver--aa75f703df9065e4 #OffSeq #SAP #Vuln #PatchTuesday", "creation_timestamp": "2026-07-14T12:00:31.386680Z"}, {"uuid": "2d37c9e1-b44a-4a01-a260-ad2d636631b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn45xkzmd26", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver & Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data & trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:02:55.014595Z"}, {"uuid": "5a8b0c73-9090-45ae-9bef-c27ae84123af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn4bus4py2s", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver & Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data & trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:05:06.472746Z"}, {"uuid": "207e2632-7cd8-40f2-a2f3-6eca190ad18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/eu-de.bsky.social/post/3mqo77tdf6g2n", "content": "Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud\n\nhttps://www.europesays.com/germany/54957/\n\nBackground SAP has released security updates to address multiple vulnerabilities (CVE-2026-44747, CVE-2026-27690, and CVE-2026-44761) affecting SAP NetWeaver Application\u2026", "creation_timestamp": "2026-07-15T07:30:18.861808Z"}, {"uuid": "74fedf6c-6ca3-49cc-a89f-cb567294c2ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mqpyj7dt2c2h", "content": "SAP\u30012026\u5e747\u6708\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30c7\u30fc\u3067CVSS 9.9\u306eNetWeaver\u91cd\u5927\u8106\u5f31\u6027\u3092\u542b\u308016\u4ef6\u3092\u4fee\u6b63(CVE-2026-44747, CVE-2026-27690)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-07-16T00:35:41.376720Z"}, {"uuid": "1ca5636b-e0ca-4589-9750-8d5e5cac3fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/eu-de.bsky.social/post/3mqqjss6emp2g", "content": "Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud\n\nhttps://www.europesays.com/germany/55654/\n\nBackground SAP has released security updates to address multiple vulnerabilities (CVE-2026-44747, CVE-2026-27690, and CVE-2026-44761) affecting SAP NetWeaver Application\u2026", "creation_timestamp": "2026-07-16T05:45:12.018826Z"}, {"uuid": "2414e477-4ec1-4405-9c45-2a7fedc92c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mup2w7eaps2r", "content": "\u300cSAP\u300d\u304c\u6708\u4f8b\u66f4\u65b0\u300116\u4ef6\u306e\u65b0\u898f\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea - 3\u4ef6\u304c\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\nSAP\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670814\u65e5\u3001\u3042\u3089\u305f\u306b16\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u305f\u3002\n\n\u5404\u793e\u304c\u5b9a\u4f8b\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3059\u308b\u7c73\u6642\u9593\u6bce\u6708\u7b2c2\u706b\u66dc\u65e5\u3001\u3044\u308f\u3086\u308b\u300c\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc\u300d\u306b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea16\u4ef6\u3092\u516c\u958b\u3057\u3001\u8106\u5f31\u602718\u4ef6\u3078\u5bfe\u5fdc\u3057...\n\n\u300cSAP NetWeaver Application Server ABAP\u300d\u3067\u306f\u3001\u30e1\u30e2\u30ea\u7834\u58ca\u306e\u8106\u5f31\u6027\u300cCVE-2026-44747\u300d\u304c\u5224\u660e\u3002\u300cSAP Approuter\u300d\u306b\u304a\u3044\u3066HTTP\u30ea\u30af\u30a8\u30b9\u30c8\u30b9\u30de\u30b0\u30ea\u30f3\u30b0\u306e\u8106\u5f31\u6027\u300cCVE-2026-27690\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-09-04T13:26:49.113345Z"}]}