# CVE-2026-44758: SAP Manufacturing Integration and Intelligence command injection

Source: https://junglewise.ai/threats/cve-2026-44758-sap-manufacturing-integration-and-intelligence-command-injection  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-44758 · Severity: critical · CVSS 9.1 · Published 2026-08-11

SAP Manufacturing Integration and Intelligence (MII) is an enterprise application used to integrate and optimize manufacturing operations. A high-privilege attacker can submit malicious input to trigger execution of arbitrary commands on the underlying server, compromising the confidentiality, integrity, and availability of manufacturing data and operations.

Technologies: [SAP Manufacturing Integration and Intelligence](https://junglewise.ai/threats/technologies/manufacturing-integration-and-intelligence). Vendors: [SAP](https://junglewise.ai/threats/vendors/sap).

## Quick answers

**Is CVE-2026-44758 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-44758 being exploited in the wild.

**How severe is CVE-2026-44758?** Critical severity, with a CVSS score of 9.1, published 11 August 2026.

**Which products and versions are affected?** SAP Manufacturing Integration and Intelligence.

**Is there a fix for CVE-2026-44758?** A patch was published on 2026-08-11. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-44758 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-44758?** Check whether you run SAP Manufacturing Integration and Intelligence. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

SAP Manufacturing Integration and Intelligence contains a command injection vulnerability in unspecified functionality that processes user input without sufficient validation. An attacker with high-level privileges can craft malicious input to execute arbitrary operating system commands on the affected system. The vulnerability is network-reachable and requires authentication at an administrative level. Successful exploitation grants the attacker complete control over the affected system, affecting confidentiality, integrity, and availability. SAP released a security patch on August 11, 2026, via the SAP Security Patch Day process (see SAP Note 3758900).

## Affected products

- SAP Manufacturing Integration and Intelligence

## Timeline

- 2026-08-11: disclosed
- 2026-08-11: patched

## References

- [https://me.sap.com/notes/3758900](https://me.sap.com/notes/3758900)
- [https://url.sap/sapsecuritypatchday](https://url.sap/sapsecuritypatchday)

## Related threats

- [SAP Manufacturing Integration and Intelligence authorization bypass](https://junglewise.ai/threats/cve-2026-89108-sap-manufacturing-integration-and-intelligence-does-not)
- [SAP Manufacturing Integration and Intelligence stored XSS](https://junglewise.ai/threats/cve-2026-76972-due-to-a-cross-site-scripting-xss-vulnerability-in-sap)
- [SAP Manufacturing Integration and Intelligence SSRF](https://junglewise.ai/threats/cve-2026-76971-sap-manufacturing-integration-and-intelligence-ssrf)
- [SAP Manufacturing Integration and Intelligence authorization bypass](https://junglewise.ai/threats/cve-2026-58244-sap-manufacturing-integration-and-intelligence-authorization)
- [SAP Manufacturing Integration and Intelligence missing authorization check](https://junglewise.ai/threats/cve-2026-44765-sap-manufacturing-integration-and-intelligence-missing)