SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-12 07:31 UTC
  • Importiert: 2026-08-19 18:50 UTC
  • CVSS: 10.0
  • Quelle-ID: thn_global
  • uid_hash: 14530d30561d23a8e8f1e73133ca3f2fed105d9115e5b6c91023898e84ce485b

Inhalt

SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.

The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation.

"SAP Commerce Cloud allows an

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-58231

CRITICAL

10

CRITICAL

10

2026-08-11

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews