CVE-2026-44763
Received Received - Intake

Path Traversal in SAP Manufacturing Integration and Intelligence

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: SAP SE

Description
SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on conditions outside the attackerοΏ½s control. Successful exploitation could allow files to be written outside the intended directory and affect other components, resulting in a high impact on confidentiality, integrity, and availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-44763
EUVD
EUVD-2026-55863

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sap manufacturing_integration_and_intelligence *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in SAP Manufacturing Integration and Intelligence involves a privileged attacker exploiting insufficient file path validation in certain functions with specially crafted input. Exploitation requires a legitimate user to access the attacker-influenced content and depends on external conditions. Successful exploitation could allow files to be written outside the intended directory, affecting other components and impacting confidentiality, integrity, and availability.

Detection Guidance

This vulnerability involves insufficient file path validation in SAP Manufacturing Integration and Intelligence. Detection would require reviewing SAP system logs for unusual file access patterns or unauthorized file writes outside intended directories. No specific commands are provided in the available context.

Impact Analysis

This vulnerability could allow unauthorized file writes outside intended directories, potentially leading to data breaches, system corruption, or unauthorized access to sensitive information. It may also disrupt operations by affecting other components dependent on file integrity.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations by enabling unauthorized data access, modification, or destruction. It may result in data breaches, violating confidentiality and integrity requirements of these standards.

Mitigation Strategies

Apply SAP Security Notes or patches addressing insufficient file path validation. Restrict user privileges to minimize impact. Monitor for unusual file writes or unauthorized directory access. Review SAP MII configurations for exposed functions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-44763. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart