CVE-2026-58231
CVSS 10 CRITICAL: sAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation.
Vulnerabilities · 88 days ago
Defused says probes hit SAP Commerce Cloud Data Hub Adapter honeypots three days after the patch; KEVIntel separately logged two attempts on August 14 from one U.S. IP. Neither report identifies an attacker or confirms a successful compromise.
CVE.org describes CVE-2026-58231 as allowing an unauthenticated attacker to misuse a default authentication client and send crafted input to functions that do not validate it properly, potentially running code and compromising internal components.
Onapsis says SAP's fix requires rebuilding and redeploying the updated Commerce Cloud version, with an IP filter as a temporary workaround. For operators, a patch-level record alone may therefore overstate closure: if the updated build was not redeployed, the vulnerable endpoint may remain exposed during probing. The reports establish attempts, not successful access or who is behind them.
CVSS 10 CRITICAL: sAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation.
6 sources covering this story
Max severity SAP Commerce Cloud flaw now targeted in attacks
A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according to threat intelligence company Defused.
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
SAP Commerce Cloud CVE-2026-58231 sees exploitation attempts three days after the patch; the CVSS 10.0 flaw could allow arbitrary code execution.
Kwetsbaarheden verholpen in SAP Commerce Cloud Data Hub Adapter
SAP heeft een kwetsbaarheid verholpen in de Data Hub Adapter voor SAP Commerce Cloud.
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
SAP fixes CVE-2026-58231, a CVSS 10.0 Commerce Cloud flaw that could let unauthenticated attackers execute arbitrary code.
Actualización de seguridad de SAP de agosto de 2026
SAP ha publicado su boletín mensual en el que se incluyen 29 vulnerabilidades: 4 de severidad crítica
SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities
SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs.
Nell’ambito del Security Patch Day di agosto, SAP rilascia aggiornamenti di sicurezza per risolvere molteplici nuove vulnerabilità, di cui 2 con gravità “critica” e 6 con gravità “alta”.
Part of the PlainSec briefing for 2026-08-12