Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure
Vulnerabilities
The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.
Hackers started exploiting a critical vulnerability in SAP Commerce Cloud just three days after its public disclosure, according to threat intelligence organizations.
The vulnerability is tracked as CVE-2026-58231 and is described as an issue involving insufficient authorization checks and input validation.
An attacker can exploit the vulnerability, which has a CVSS score of 10, to execute arbitrary code and compromise internal components.
SAP announced patches for CVE-2026-58231 on August 11 and Defused reported that its honeypots had started seeing exploitation attempts on August 14. The security firm noted that there had been no public PoC exploit and no prior reports of in-the-wild exploitation.
KEVIntel, which uses proprietary sensors and private honeypots to observe exploitation attempts, independently confirmed seeing attacks.
The organization noted on August 15 that a PoC exploit has become available.
Advertisement....
Copyright of this story solely belongs to securityweek.com. To see the full text click HERE
