CyberSecurity News

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

The Hacker News

· August 12, 2026

AI summary

SAP has released patches for a high-severity security flaw in Commerce Cloud's Data Hub Adapter. The vulnerability could allow unauthenticated attackers to execute arbitrary code. It is due to insufficient authorization checks and input validation, and has a CVSS score of 10.0. The issue has been assigned the CVE identifier CVE-2026-58231. SAP Commerce Cloud is affected by this flaw, which could be exploited by unauthenticated attackers.

Vulnerabilities mentioned

CVE-2026-58231

CRITICAL

CVSS 10

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.

Read the full article at The Hacker Newsthehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to The Hacker News.