What is CVE-2026-76971?

CVE-2026-76971 is a medium-severity vulnerability in SAP Se Manufacturing Integration And Intelligence, classified under Server-Side Request Forgery (SSRF). CVSS score: 6.5/10. Published 2026-09-08.

How severe is CVE-2026-76971?

Medium severity. CVSS v3 base score is 6.5 out of 10.

SSRF in SAP Se Manufacturing Integration And Intelligence

CVE-2026-76971

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of scripts. Successful exploitation could result in a low impact on the confidentiality, integrity, and availability of the application.

Vulnerability class: SSRF (Server-Side Request Forgery)

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L.

Affected products

Sap_se Sap Manufacturing Integration And Intelligence — versions 15.5, XMII 15.4

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

Frequently asked questions

What is CVE-2026-76971?: CVE-2026-76971 is a medium-severity vulnerability in SAP Se Manufacturing Integration And Intelligence, classified under Server-Side Request Forgery (SSRF). CVSS score: 6.5/10. Published 2026-09-08.
How severe is CVE-2026-76971?: Medium severity. CVSS v3 base score is 6.5 out of 10.