What is the CVSS score of EUVD-2026-55863?

EUVD-2026-55863 has a CVSS 3.1 base score of 7.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of SAP MII are affected by EUVD-2026-55863?

SAP Manufacturing Integration and Intelligence contains a path traversal vulnerability (CVE-2026-44763) enabling unauthorized file modifications within the manufacturing system.

How to fix or mitigate EUVD-2026-55863?

Within 24 hours, inventory all SAP Manufacturing Integration and Intelligence instances and assess production criticality; enable comprehensive audit logging for file operations and access events. Within 7 days, restrict access to the affected component to only essential highly privileged accounts, implement file integrity monitoring on critical manufacturing directories, and apply network segmentation to limit lateral movement. Within 30 days, establish weekly monitoring of SAP security advisories and pre-stage patch deployment procedures for immediate implementation when SAP releases a fix.

SAP MII EUVD-2026-55863

| CVE-2026-44763 HIGH

Path Traversal (CWE-22)

2026-08-11 sap

GHSA-6jcv-7r6v-m274

Path Traversal SAP Sap Manufacturing Integration And Intelligence Sap Se

7.6

CVSS 3.1 · Vendor: sap

Severity by source

Vendor (sap) PRIMARY

7.6 HIGH

AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

vuln.today AI

7.6 HIGH

Privileged access and dependent user interaction required per description; scope change confirmed by cross-component file write impact.

3.1 AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (sap).

CVSS VectorVendor: sap

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 11, 2026 - 01:02 vuln.today

CVE Published

Aug 11, 2026 - 00:11 cve.org

HIGH 7.6

DescriptionCVE.org

SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on conditions outside the attacker�s control. Successful exploitation could allow files to be written outside the intended directory and affect other components, resulting in a high impact on confidentiality, integrity, and availability.

AnalysisAI

Path traversal in SAP Manufacturing Integration and Intelligence allows a highly privileged attacker to write files outside intended directory boundaries by supplying specially crafted input to affected file path validation functions. Exploitation requires a legitimate user to subsequently interact with the attacker-influenced content and depends on conditions outside the attacker's direct control, as reflected by the AC:H and UI:R CVSS metrics. Successful exploitation achieves a scope change affecting adjacent components with high impact on confidentiality, integrity, and availability. No public exploit code and no CISA KEV listing exist at time of analysis.

Technical ContextAI

SAP Manufacturing Integration and Intelligence (SAP MII) is an SAP platform that integrates shop floor manufacturing systems with enterprise business processes. The vulnerability is rooted in CWE-22 (Improper Limitation of a Pathname to a Restricted Directory - Path Traversal), where specific functions within the application fail to adequately validate or sanitize file path inputs. Specially crafted input containing traversal sequences can redirect file write operations outside the application's intended directory boundary. The CVSS scope change metric (S:C) indicates that files written to unintended locations can be consumed by or affect components beyond SAP MII itself - for example, other SAP NetWeaver services, OS-level utilities, or shared file system areas. The affected product is identified by CPE cpe:2.3:a:sap_se:sap_manufacturing_integration_and_intelligence:*:*:*:*:*:*:*:*.

RemediationAI

SAP has issued a corrective patch delivered through SAP Security Note 3759854, available to customers via the SAP Support Portal at https://me.sap.com/notes/3759854; apply this note using the SNOTE transaction or SAP Landscape Management as the primary remediation step, verifying the exact fix version confirmed in the note. The SAP Security Patch Day page at https://url.sap/sapsecuritypatchday provides patch cycle context. As an interim compensating control, restrict the SAP MII privileged roles (PR:H is required for exploitation) to the smallest possible set of accounts, applying principle of least privilege to reduce the attacker pool. Additionally, enable file system integrity monitoring on SAP MII's working directories to detect anomalous write attempts outside expected paths as a detective control. Note that tightening role assignments may affect administrative workflows, so change-manage access control modifications carefully in production environments.