Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4387 articles · 232249 vulns · 35/41 feeds (7d)
← Back to list
10.0
CVE-2026-58231KEVEXPLOITED
sap · sap commerce cloud (data hub adapter)

Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

Description

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.

Affected Products

VendorProductVersions
sapsap commerce cloud (data hub adapter)COM_CLOUD 2211, 2211-JDK21

References

  • https://me.sap.com/notes/3771065
  • https://url.sap/sapsecuritypatchday

Related News (15 articles)

Tier D
BleepingComputer3h ago
SAP warns of maximum severity OAuth2 SSRF security flaw
→ No new info (linked only)
Tier D
Infosecurity Magazine34d ago
Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026
→ No new info (linked only)
Tier D
BleepingComputer35d ago
SAP warns of maximum severity 'OVERPASS' kernel vulnerability
→ No new info (linked only)
Tier D
SecurityWeek57d ago
Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure
→ No new info (linked only)
Tier D
Heise Security57d ago
Angriffe auf SAP-Commerce-Cloud-Lücke beobachtet
→ No new info (linked only)
Tier B
CERT-FR57d ago
Bulletin d'actualité CERTFR-2026-ACT-035 (17 août 2026)
→ No new info (linked only)
Tier E
Reddit r/cybersecurity59d ago
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
→ No new info (linked only)
Tier D
The Hacker News59d ago
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
→ No new info (linked only)
Tier D
BleepingComputer60d ago
Max severity SAP Commerce Cloud flaw now targeted in attacks
→ No new info (linked only)
Tier D
The Hacker News62d ago
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
→ No new info (linked only)
Tier D
CSO Online62d ago
Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability
→ No new info (linked only)
Tier D
SecurityWeek63d ago
SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities
→ No new info (linked only)
Tier D
Heise Security63d ago
Patchday: SAP Commerce Cloud komplett kompromittierbar
→ No new info (linked only)
Tier C
VulDB63d ago
CVE-2026-58231 | SAP Commerce Cloud 2211-JDK21/COM_CLOUD 2211 improper authentication
→ No new info (linked only)
Tier B
CERT-FR63d ago
Multiples vulnérabilités dans les produits SAP (11 août 2026)
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.110.0 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA KEV✅ Yes
Actively exploited✅ Yes
CWECWE-94
PublishedAug 11, 2026
Trending Score150🔥
Source articles15
Independent9
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-89110
Broken Access Control in SAP NetWeaver Visual Composer
Trending: 54
CRITICALCVE-2026-89107
Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)
Trending: 50
CRITICALCVE-2026-89108
Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)
Trending: 50
HIGHCVE-2026-58249
Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)
Trending: 48
CRITICALCVE-2026-89111
OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
Trending: 45

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 11, 2026
Added to CISA KEV
Aug 11, 2026
Discovered by ZDM
Aug 11, 2026
Actively Exploited
Aug 12, 2026