SAP's August Patch Day Flags Six Manufacturing-System Vulnerabilities

SAP's August 11, 2026 Security Patch Day released 28 new security notes and one GitHub security advisory, with particular attention on six vulnerabilities in SAP Manufacturing Integration and Intelligence (MII) — the layer connecting SAP ERP to shop-floor manufacturing systems.

Why MII Specifically Is the Concern

MII sits at the boundary between enterprise IT and operational technology (OT) — the actual machines, sensors, and control systems on a factory floor. Vulnerabilities there carry a different risk profile than a typical ERP bug: a compromise can potentially propagate from business systems into physical production equipment, not just corrupt or expose data.

The Broader Pattern Worth Tracking

• This patch day arrives as more manufacturers connect AI agents and automation directly into MII-managed shop-floor workflows for predictive maintenance and quality control
• Every new integration point between agentic AI and OT systems is also a new potential attack surface, not just a new capability
• Security and manufacturing teams should treat MII patch cadence as a joint IT/OT responsibility, not something that falls solely to either side

For manufacturers running SAP with connected shop-floor systems, the practical action is straightforward but time-sensitive: prioritize the six MII notes specifically, ahead of the broader patch backlog, given the IT/OT boundary they sit on.