CVE-2026-44758CWE-94code-injection

CVE-2026-44758

Critical · published August 11, 2026

CVSS v3.1
9.1
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system, resulting in high impact on confidentiality, integrity, and availability of the application.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00768 · 55.1th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-08-11T05:17Z
References (2)
EPSS history
Timeline
  • 11 AUG 00:11Z
    Code Injection vulnerability in Manufacturing Integration and Intelligence
    cvelistv5