Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5005 articles · 188942 vulns · 37/41 feeds (7d)
← Back to list
9.1
CVE-2026-44758
sap · sap manufacturing integration and intelligence

Code Injection vulnerability in Manufacturing Integration and Intelligence

Description

SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system, resulting in high impact on confidentiality, integrity, and availability of the application.

Affected Products

VendorProductVersions
sapsap manufacturing integration and intelligenceXMII 15.4, 15.5

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
sapsap softwarecert_advisory90%

References

  • https://me.sap.com/notes/3758900
  • https://url.sap/sapsecuritypatchday

Related News (5 articles)

Tier D
SecurityWeek1d ago
SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities
→ No new info (linked only)
Tier D
Heise Security1d ago
Patchday: SAP Commerce Cloud komplett kompromittierbar
→ No new info (linked only)
Tier B
BSI Advisories1d ago
[NEU] [hoch] SAP Patch Day August 2026: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB1d ago
CVE-2026-44758 | SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4 code injection
→ No new info (linked only)
Tier B
CERT-FR1d ago
Multiples vulnérabilités dans les produits SAP (11 août 2026)
→ No new info (linked only)
CVSS 3.19.1 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
CWECWE-94
PublishedAug 11, 2026
Trending Score52
Source articles5
Independent5
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-58231
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
Trending: 68
CRITICALCVE-2026-34265
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
Trending: 60
HIGHCVE-2026-44764
Missing Authorization Check in SAP Manufacturing Integration and Intelligence
Trending: 46
HIGHCVE-2026-44765
Missing Authorization Check in SAP Manufacturing Integration and Intelligence
Trending: 46
MEDIUMCVE-2026-40130
Memory Corruption vulnerability in SAPSPrint Service
Trending: 43

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 11, 2026
Discovered by ZDM
Aug 11, 2026