CYBERSIXT Signal Over Noise
All CVEs
Vulnerability intelligence

CVE-2026-58231

CWE-94

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.

CVSS Score
10
Critical
EPSS — Exploit Probability
0.0%
Riskier than 0% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
unknown
Check vendor advisories
NVD entry PoC / advisory

2 articles across 2 outlets · first covered Aug 11, 2026 · latest Aug 11, 2026

Tracked incidents

vulnerability open 2 articles
SAP patches critical CVE-2026-58231 in Commerce Cloud and NetWeaver

Coverage timeline