Vulnerability intelligence
CVE-2026-58231
SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.
CVSS Score
10
Critical
EPSS — Exploit Probability
0.9%
Riskier than 57% of all CVEs · checked 2026-09-25
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
5 articles across 3 outlets · first covered Aug 11, 2026 · latest Aug 17, 2026
Coverage timeline
-
SAP Commerce Cloud flaw lets attackers run code after patch delaywww.securityweek.com · Aug 17, 2026
-
Hackers Leverage Expired Domains for Malware, SAP, macOS Exploitssecurityaffairs.com · Aug 16, 2026
-
SAP Commerce Cloud CVE-2026-58231 Exploited in the Wildsecurityaffairs.com · Aug 15, 2026
-
SAP patches critical CVE-2026-58231 in Commerce Cloud, 28 notessecurityonline.info · Aug 11, 2026
-
SAP Patches Critical Code Injection, Memory Corruption Vulnerabilitieswww.securityweek.com · Aug 11, 2026