CVE-2026-44765
Received Received - Intake

Missing Authorization Check in SAP Manufacturing Integration and Intelligence

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: SAP SE

Description
Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated remote attacker could access scheduling-related application functions without proper authorization validation. Successful exploitation could allow the attacker to retrieve, create, modify, or delete application-managed scheduling data, causing a low impact on confidentiality, integrity, and availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-44765
EUVD
EUVD-2026-55865

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sap manufacturing_integration_and_intelligence *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Missing Authorization Check in SAP Manufacturing Integration and Intelligence. An unauthenticated remote attacker can access scheduling-related functions without proper authorization validation. This could let them retrieve, create, modify, or delete scheduling data, affecting confidentiality, integrity, and availability.

Impact Analysis

An attacker could exploit this to alter scheduling data, potentially disrupting manufacturing processes or causing incorrect scheduling decisions. The impact is low but could lead to operational disruptions or data integrity issues.

Compliance Impact

This vulnerability could impact compliance by allowing unauthorized access to scheduling data, potentially violating data integrity and confidentiality requirements in GDPR or HIPAA. However, specific compliance impacts depend on the organization's implementation.

Mitigation Strategies

Apply the latest security patches from SAP for Manufacturing Integration and Intelligence to address the missing authorization check. Review and restrict network access to the affected application to prevent unauthenticated remote access. Monitor application logs for unusual scheduling-related activities.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-44765. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart