SAP Commerce Cloud CVE-2026-58231 Actively Exploited Days After Patch Release

A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts days after a patch was released. The vulnerability, tracked as CVE-2026-58231, is rated 10.0 on the CVSS scoring system and relates to insufficient authorization checks and input validation.

According to reporting, SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit malicious requests. Active exploitation attempts have been observed targeting instances that have not yet been patched. The exploitation leverages the default authentication client abuse to potentially gain unauthorized access, exfiltrate data, or achieve full system compromise.

SAP has released a security update to address CVE-2026-58231. The company urges all customers to apply the patch urgently, particularly those running unpatched instances exposed to the internet. The rapid emergence of exploitation attempts shortly after patch release underscores the critical nature of this flaw.