EUVD-2026-55861
GHSA-6fg7-7j35-w9pj
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Network-reachable authenticated function requiring high privileges (PR:H), no user interaction, and OS command execution crossing from app to host justifies S:C with full C/I/A impact.
Primary rating from Vendor (sap).
CVSS VectorVendor: sap
Lifecycle Timeline
2DescriptionCVE.org
SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system, resulting in high impact on confidentiality, integrity, and availability of the application.
Articles & Coverage 1
AnalysisAI
OS command execution in SAP Manufacturing Integration and Intelligence (MII) lets an already-highly-privileged application user submit crafted input to affected functionality that is passed to the operating system without sufficient validation (CWE-94 code injection). Because exploitation crosses from the application into the underlying host (scope change), a successful attack yields full confidentiality, integrity, and availability impact on the server, not just the app. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to already possess high application privileges in SAP MII (CVSS PR:H) - a valid, highly-privileged MII/NetWeaver account with access to the affected functionality that accepts the crafted input; it is not exploitable by an anonymous or low-privileged user. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS vector CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H drives the 9.1: remotely reachable (AV:N), low attack complexity (AC:L), no user interaction (UI:N), and a scope change to the OS with total CIA loss - but critically PR:H, meaning the attacker must already hold high application privileges, which is the single largest limiter on real-world risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Patch available per vendor advisory: apply SAP Security Note 3758900 (https://me.sap.com/notes/3758900), released via SAP Security Patch Day (https://url.sap/sapsecuritypatchday), which contains the corrected code and the exact fixed support-package levels for your MII release - the provided data does not include a specific fix version, so obtain it from the Note. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Immediately within 24 hours: identify all systems running SAP MII and assess which users hold the administrative privileges required to exploit this vulnerability; restrict administrative access to essential personnel only, enforce separation of duties, and disable network connectivity if the application is not actively required for production manufacturing. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Path traversal in SAP Manufacturing Integration and Intelligence allows a highly privileged attacker to write files outs
Unauthenticated remote access to SAP Manufacturing Integration and Intelligence (MII) scheduling functions is possible d
Missing authorization on the Cost Servlet in SAP Manufacturing Integration and Intelligence (SAP MII) exposes backend op
Missing authorization enforcement in SAP Manufacturing Integration and Intelligence (MII) versions 15.4 and 15.5 allows
Same weakness CWE-94 – Code Injection
View allSame technique Code Injection
View allShare
External POC / Exploit Code
Leaving vuln.today