CVE-2026-44758

CVE Enrichment

CVSS: 9.1 CRITICAL
EPSS: 0.77%
EPSS Percentile: 55.12%
CISA KEV: Not listed

Description

SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system, resulting in high impact on confidentiality, integrity, and availability of the application.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 11-Aug-2026 08:17
Last Modified: 24-Oct-2026 02:10
EPSS Date: 2026-10-24
CWE: CWE-94

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:H /
                            UI:N /
                            S:C /
                            C:H /
                            I:H /
                            A:H

References

Last enrichment sync: 02-Nov-2026 21:10
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

SAP also addressed two critical code injection flaws in Manufacturing Integration and Intelligence, tracked as CVE-2026-44772 (CVSS score of 9.9/10) and CVE-2026-44758 (CVSS score of 9.1/10). SAP Patches Critical Authentication, Code Injection and Memory Corruption Flaws

CVE (3)

Vendors (1)

Products (10)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.