CVE-2026-58231

CRITICAL10.0Published on August 11, 2026

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.

CVSS score10.0 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-94

SAP Commerce Cloud, CVE-2026-58231 è già sotto attacco: rischio massimo per le installazioni esposte

Vulnerabilities

SAP Commerce Cloud CVE-2026-58231 Already Under Attack: Maximum Risk for Exposed Installations

CVE-2026-58231, a critical SAP Commerce Cloud flaw, is already being targeted in exploitation attempts. Defused, a threat intelligence company, reported

Aug 14, 20264 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

SAP Commerce Cloud CVE-2026-58231 Already Under Attack: Maximum Risk for Exposed Installations