CVE Tools
Track your stack

Max severity SAP Commerce Cloud flaw now targeted in attacks

BleepingComputerBy Sergiu Gatlan

Reported exploitedSAP Commerce Cloud

Our summary

Threat intelligence firm Defused reports that a critical remote code execution vulnerability in SAP Commerce Cloud is being actively targeted despite having only recently been patched. Tracked as CVE-2026-58231 with a maximum CVSS score of 10.0, this flaw allows unauthenticated attackers to execute arbitrary code by abusing a default authentication client within the Data Hub Adapter extension. Although SAP has not yet updated its official advisory to confirm widespread exploitation, shadow server data indicates over 4,200 internet-exposed instances remain vulnerable across Europe and North America. Organizations should apply the latest security fixes immediately to mitigate the risk of system compromise.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

  1. BleepingComputerSAP warns of maximum severity 'OVERPASS' kernel vulnerabilityCVE-2026-58231
  2. The Hacker News⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and MoreCVE-2026-58231
  3. SecurityWeekCritical SAP Commerce Cloud Vulnerability Exploited 3 Days After DisclosureCVE-2026-58231
  4. The Hacker NewsSAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After PatchCVE-2026-58231
  5. The Hacker NewsSAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary CodeCVE-2026-58231
  6. SecurityWeekSAP Patches Critical Code Injection, Memory Corruption VulnerabilitiesCVE-2026-58231
  7. The Hacker News⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and MoreCVE-2026-44761
  8. The Hacker NewsSAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify DataCVE-2026-44761
  9. BleepingComputerSAP warns of critical flaws in NetWeaver and Commerce CloudCVE-2026-44761
  10. SecurityWeekSAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce CloudCVE-2026-44761

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store