Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system, resulting in high impact on confidentiality, integrity, and availability of the application.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
6 of August's SAP vulnerabilities landed in 1 product. SAP Manufacturing Integration and Intelligence took 2 critical, 3 high-priority and 1 medium-severity note, including CVE-2026-44772 at CVSS 9.9 and CVE-2026-44758 at CVSS 9.1.
Post summary
The text announces six SAP vulnerabilities affecting the Manufacturing Integration and Intelligence product, listing CVE IDs, CVSS scores, and severity classifications.
Warning: multiple critical code injection, out-of-bounds write in #SAP #commercecloud #netweaver #MII CVE-2026-58231, CVE-2026-44772, CVE-2026-34265 & CVE-2026-44758 CVSS: 10-9.1 The first one is actively exploited #Patch #Patch #Patch
Post summary
Multiple critical SAP vulnerabilities with high CVSS scores are actively exploited, but no PoC, exploit code, or patch details are disclosed.