CVE-2026-66766 — Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)
SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacker could supply spe…
Published: 2026-08-25 · CVSS: 7.5 · CVSS 3.1
SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could exhaust system resources and make the service unavailable, resulting in a high impact on availability. There is no impact on confidentiality and integrity.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7