SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A critical security vulnerability in SAP Commerce Cloud, rated with the highest severity score, is being actively exploited. The issue is related to inadequate authorization checks and input validation, allowing an unauthenticated attacker to exploit a default authentication client. This vulnerability has a CVSS score of 10.0, indicating a maximum level of severity. Exploitation attempts have been observed shortly after a patch was released. The vulnerability could be abused by submitting malicious input. Active exploitation efforts are currently underway, targeting this specific security flaw.