CVE-2026-44763 Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence
Privileged attackers can write files outside intended directories via path traversal, impacting confidentiality, integrity, and availability in SAP Manufacturing Integration and Intelligence.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-44763?
CVE-2026-44763 is a high-severity path traversal vulnerability in SAP_SE SAP Manufacturing Integration and Intelligence, published on 11 Aug 2026. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on conditions outside the attacker�s control. Successful exploitation could allow files to be written outside the intended directory and affect other components, resulting in a high impact on confidentiality, integrity, and availability.
Weakness: CWE-22
Which versions are affected by CVE-2026-44763?
How do I fix CVE-2026-44763?
No fix has been published for CVE-2026-44763 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-44763 being exploited?
There is no known exploitation of CVE-2026-44763 in the wild and no public exploit code.
Sources
Also known as GHSA-6jcv-7r6v-m274.