CVE-2026-44764
published 2026-08-11CVE-2026-44764: Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests…
PriorityP349high7.3CVSS 3.1
AVNACLPRNUINSUCLILAL
EPSS
0.32%
24.1th percentile
Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Cost Servlet using specific parameter values. If processed by the application, these requests enable access to backend operations. Successful exploitation could allow the attacker to read, create, modify, or delete application-managed business data, resulting in a limited impact on the confidentiality, integrity, and availability of the affected system.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_manufacturing_integration_and_intelligence | — | — |
| sap_se | sap_manufacturing_integration_and_intelligence | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4 Cost Servlet improper authorization
vuldb·2026-08-11·CVSS 7.3
CVE-2026-44764 [HIGH] SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4 Cost Servlet improper authorization
A vulnerability, which was classified as critical, was found in SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4. This affects an unknown function of the component Cost Servlet. Such manipulation leads to improper authorization.
This vulnerability is documented as CVE-2026-44764. The attack can be executed remotely. There is not any exploit available.
GHSA
Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Cost Servlet using specific paramet
ghsa_unreviewed·2026-08-11
CVE-2026-44764 [HIGH] CWE-862 Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Cost Servlet using specific paramet
Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Cost Servlet using specific parameter values. If processed by the application, these requests enable access to backend operations. Successful exploitation could allow the attacker to read, create, modify, or delete application-managed business data, resulting in a limited impact on the confidentiality, integrity, and availability of the affected system.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-11
Published