CVE-2026-44758
Code Injection vulnerability in Manufacturing Integration and Intelligence
- State
- Published
- Severity
- 9.1 Critical
- Published
- Aug 11, 2026
- Updated
- Aug 11, 2026
- Reserved
- May 7, 2026
Description
SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system, resulting in high impact on confidentiality, integrity, and availability of the application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.1 Critical | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H | sap |
Weaknesses
- CWE-94 Improper Control of Generation of Code
Affected Products
| Product | Versions |
|---|---|
SAP Manufacturing Integration and IntelligenceSAP_SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.