CVE-2026-44763
published 2026-08-11CVE-2026-44763: SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially…
PriorityP344high7.6CVSS 3.1
AVNACHPRHUIRSCCHIHAH
EPSS
0.40%
32.5th percentile
SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on conditions outside the attacker�s control. Successful exploitation could allow files to be written outside the intended directory and affect other components, resulting in a high impact on confidentiality, integrity, and availability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_manufacturing_integration_and_intelligence | — | — |
| sap_se | sap_manufacturing_integration_and_intelligence | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4 path traversal
vuldb·2026-08-11·CVSS 7.6
CVE-2026-44763 [HIGH] SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4 path traversal
A vulnerability marked as problematic has been reported in SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4. The affected element is an unknown function. The manipulation leads to path traversal.
This vulnerability is referenced as CVE-2026-44763. Remote exploitation of the attack is possible. No exploit is available.
GHSA
SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input.
ghsa_unreviewed·2026-08-11
CVE-2026-44763 [HIGH] CWE-22 SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input.
SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on conditions outside the attacker�s control. Successful exploitation could allow files to be written outside the intended directory and affect other components, resulting in a high impact on confidentiality, integrity, and availability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-11
Published