Critical severity · published Aug 11, 2026
CVE-2026-44758
Code Injection vulnerability in Manufacturing Integration and Intelligence
9.1
CVSS
0.8%
EPSS
No
On KEV
Description
SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system, resulting in high impact on confidentiality, integrity, and availability of the application.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
SAP Manufacturing Integration and Intelligence · SAP_SE
XMII 15.4; 15.5 · source: vendor
Affected product
SM
SAP Manufacturing Integration and Intelligence
SAP_SE
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-44758
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-44758
me.sap.com
https://me.sap.com/notes/3758900
url.sap
https://url.sap/sapsecuritypatchday
More from SAP Manufacturing Integration and Intelligence
8.8
CVE-2019-0267
SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Anti-XSRF tokens
7.6
CVE-2026-44763
Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence
7.3
CVE-2026-44765
Missing Authorization Check in SAP Manufacturing Integration and Intelligence
7.3
CVE-2026-44764
Missing Authorization Check in SAP Manufacturing Integration and Intelligence
6.5
CVE-2026-76972
Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence
