CVE-2026-44765 — Missing Authorization Check in SAP Manufacturing Integration and Intelligence

CVE-2026-44765

Missing Authorization Check in SAP Manufacturing Integration and Intelligence PUBLISHED

Description (CNA)

Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated remote attacker could access scheduling-related application functions without proper authorization validation. Successful exploitation could allow the attacker to retrieve, create, modify, or delete application-managed scheduling data, causing a low impact on confidentiality, integrity, and availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Manufacturing Integration and Intelligence	affected XMII 15.4; affected 15.5

CWE

CWE-862

References

https://me.sap.com/notes/3758657
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.