SECURITYAug 12 · 07:31 UTCTHE HACKER NEWS[email protected] (The Hacker News)

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

SAP has released patches addressing a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter). This vulnerability, designated CVE-2026-58231 and rated 10.0 on the CVSS scoring system, allows unauthenticated attackers to execute arbitrary code through insufficient authorization checks and input validation.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

SAPorganizationCommerce CloudtopicData Hub AdaptertopicCVE-2026-58231topicCVSS scoring systemtopicUnauthenticated attackerstopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYMay 12 · 11:04 UTC
SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA
SECURITYJul 14 · 11:42 UTC
SAP warns of critical flaws in NetWeaver and Commerce Cloud
SECURITYJun 9 · 19:36 UTC
SAP fixes critical flaws in NetWeaver and Commerce Cloud
SECURITYJul 21 · 06:29 UTC
Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
SECURITYJun 13 · 13:23 UTC
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication