What is the CVSS score of EUVD-2026-55865?

EUVD-2026-55865 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.3%.

Which versions of SAP MII are affected by EUVD-2026-55865?

SAP Manufacturing Integration and Intelligence (MII) contains an authorization bypass affecting scheduling API endpoints that allows unauthenticated remote attackers to retrieve, create, modify, or…

How to fix or mitigate EUVD-2026-55865?

Within 24 hours: Identify all SAP MII deployments, assess network-layer exposure, and immediately restrict scheduling API endpoint access via firewall rules; require VPN authentication for any necessary administrative access and baseline current scheduling data state. Within 7 days: Implement network segmentation isolating SAP MII from untrusted networks, enable comprehensive logging and alerting on all scheduling endpoint access and data modifications, and assign incident response ownership. Within 30 days: Continuously monitor SAP security advisories for patch release, evaluate interim controls such as API gateway authentication enforcement on scheduling endpoints, and conduct broader authorization assessment of MII implementation.

SAP MII EUVD-2026-55865

| CVE-2026-44765 HIGH

Missing Authorization (CWE-862)

2026-08-11 sap

GHSA-jc2h-p8j7-x9g5

Authentication Bypass SAP Sap Manufacturing Integration And Intelligence Sap Se

7.3

CVSS 3.1 · Vendor: sap

Severity by source

Vendor (sap) PRIMARY

7.3 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

vuln.today AI

7.3 HIGH

Network-reachable, no auth required (PR:N), and low complexity fully supported by description; S:U and low C/I/A reflect limited scope to scheduling data only.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (sap).

CVSS VectorVendor: sap

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Aug 11, 2026 - 01:02 vuln.today

CVE Published

Aug 11, 2026 - 00:12 cve.org

HIGH 7.3

DescriptionCVE.org

Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated remote attacker could access scheduling-related application functions without proper authorization validation. Successful exploitation could allow the attacker to retrieve, create, modify, or delete application-managed scheduling data, causing a low impact on confidentiality, integrity, and availability.

AnalysisAI

Unauthenticated remote access to SAP Manufacturing Integration and Intelligence (MII) scheduling functions is possible due to a missing authorization check on scheduling-related API endpoints. Any network-reachable attacker without credentials can retrieve, create, modify, or delete scheduling data managed by the application, impacting confidentiality, integrity, and availability at a low severity level each. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, but the trivial exploitation conditions - no authentication, no user interaction, low complexity - lower the barrier to opportunistic abuse significantly.

Technical ContextAI

SAP Manufacturing Integration and Intelligence (MII) is an SAP SE platform designed to bridge shop-floor operational technology systems with enterprise SAP ERP layers, commonly deployed in manufacturing environments for scheduling, production monitoring, and data integration. CWE-862 (Missing Authorization) indicates the application exposes scheduling-related functions or API endpoints without performing any server-side authorization check against the requesting user's identity or role. This is distinct from authentication bypass - the server may technically accept the request as anonymous - but the core defect is that authorization gating logic is entirely absent for these specific function endpoints, not merely circumvented. The CPE string cpe:2.3:a:sap_se:sap_manufacturing_integration_and_intelligence:*:*:*:*:*:*:*:* with a wildcard version component indicates SAP has not bounded the affected version range in NVD data, suggesting broad version scope. The CVSS vector AV:N/AC:L/PR:N/UI:N reflects that the exposed endpoints are reachable over a standard network with no preconditions.

RemediationAI

Apply the fix documented in SAP Security Note 3758657, available through the SAP support portal at https://me.sap.com/notes/3758657. SAP Security Notes typically deliver corrections via transport packages or patches applied through SAP Solution Manager or direct system import; customers should follow SAP's standard correction instruction deployment process. An exact patched version number is not independently confirmed from the available input data - the fix version should be verified directly against the Security Note. As a compensating control pending patch deployment, network-layer access controls should be applied to restrict SAP MII scheduling endpoints to known internal IP ranges, preventing opportunistic external access; this reduces exposure without eliminating the underlying authorization defect. If SAP MII is not required to be externally accessible, placing it behind a Web Application Firewall or network perimeter with allowlisting of authorized source addresses is advisable. Monitoring SAP application logs for unexpected access patterns to scheduling functions can aid in detecting exploitation attempts during the remediation window.