Hackers Started to Exploit Critical SAP Commerce Cloud, Still No Public PoC
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.3 Articles
3 Articles
SAP Commerce Cloud Vulnerability Targeted After Patch
A maximum-severity vulnerability in SAP Commerce Cloud is reportedly facing exploitation attempts only days after SAP released a security update. Tracked as CVE-2026-58231, the flaw carries a CVSS score of 10.0 and affects the platform’s Data Hub Adapter component. Its rapid targeting highlights the risks organizations face when internet-facing enterprise software remains unpatched. The vulnerability stems from insufficient authorization checks …
The critical vulnerability in SAP Commerce Cloud (CVE-2026-58231) already records attempts at real exploitation, according to Defused Cyber's honeypots. Authentication failure, with a CVSS score of 10.0, allows an unauthenticated attacker to execute arbitrary code and compromise the internal components of the application. SAP's security bulletin details that the root of the problem lies in the inadequacy of authorization checks and input validat…
Hackers Started to Exploit Critical SAP Commerce Cloud, Still No Public PoC
Threat actors have begun actively probing and attempting to exploit a maximum-severity flaw in SAP Commerce Cloud, just three days after official security fixes were released. Defused honeypot telemetry captured the first wave of unauthenticated remote-execution traffic circulating across the web, despite the complete absence of a public proof of concept. Tracked as CVE-2026-58231, the security defect carries a critical CVSS score of 10.0, repre…
Coverage Details
Bias Distribution
- There is no tracked Bias information for the sources covering this story.
Factuality
To view factuality data please Upgrade to Premium
