9.6 CriticalCWE-459
CVE-2026-34263
SAP_SE SAP Commerce cloud configuration vulnerability
SAP_SESAP Commerce cloud configuration
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 22 Oct
0.6%probability of exploitation in the next 30 days
Higher than 49% of scored CVEs
SeverityCVSS
9.6Critical
Description NVD
Due to improper Spring Security configuration, SAP Commerce Cloud allows an unauthenticated user to perform malicious input injection, resulting in arbitrary server-side code execution, leading to high impact on Confidentiality, Integrity, and Availability of the application.
Coverage No articles yet
No CyberSIXT article names CVE-2026-34263 yet. New articles appear here and in the RSS feed.