Exploitation14 Aug 2026·1 source
Active Attacks Target Max-Severity SAP Commerce Cloud RCE Patched Three Days Ago
A critical remote code execution vulnerability in SAP Commerce Cloud, patched on Tuesday, is already seeing exploitation attempts in the wild just three days later, according to Defused. The flaw, tracked as CVE-2026-58231, allows unauthenticated attackers to abuse a default authentication client and submit crafted input to trigger arbitrary code execution with high impact on confidentiality, integrity and availability.
SAPCommerce CloudRCE+1
