by Kastro
Paper/Archive/CVE-2026-58231

CVE-2026-58231

SAP_SE SAP Commerce Cloud (Data Hub Adapter) — Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

EPSS 0.9%CVSS 10.0
critical.is priorityof 100
42
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 58.4.584 × 2011.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.

Affected

ProductAffectedFixed inSource
SAP Commerce Cloud (Data Hub Adapter)COM_CLOUD 2211–CNA
SAP Commerce Cloud (Data Hub Adapter)2211-JDK21–CNA

Scores by source

sap (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refme.sap.com/notes/3771065refurl.sap/sapsecuritypatchday