CVE-2026-58244
published 2026-08-11CVE-2026-58244: SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowing a low-privileged…
PriorityP423medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.28%
19.6th percentile
SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated attacker to access information that should be restricted to privileged users. Successful exploitation could allow the attacker to access the users account information in the application, which could be leveraged to facilitate further attacks against the identified user accounts. This vulnerability results in low impact on confidentiality of the data, with no impact on the integrity and availability
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_manufacturing_integration_and_intelligence | — | — |
| sap_se | sap_manufacturing_integration_and_intelligence | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated attacker to access informat
ghsa_unreviewed·2026-08-11
CVE-2026-58244 [MEDIUM] CWE-862 SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated attacker to access informat
SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated attacker to access information that should be restricted to privileged users. Successful exploitation could allow the attacker to access the users account information in the application, which could be leveraged to facilitate further attacks against the identified user accounts. This vulnerability results in low impact on confidentiality of the data, with no impact on the integrity and availability
VulDB
SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4 improper authorization
vuldb·2026-08-11·CVSS 4.3
CVE-2026-58244 [MEDIUM] SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4 improper authorization
A vulnerability classified as problematic was found in SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4. This impacts an unknown function. Such manipulation leads to improper authorization.
This vulnerability is listed as CVE-2026-58244. The attack may be performed from remote. There is no available exploit.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-11
Published