The vulnerability has a maximum severity score of 10, indicating serious potential impact and relative ease to exploit by an attacker.
Researchers warn that a critical vulnerability in SAP Commerce Cloud is facing exploitation just days after the company issued a patch.
Defused, a firm that specializes in threat intelligence, said Friday that it detected initial exploitation activity against the flaw, which is tracked asCVE-2026-58231,according to a post on X. Exploitation began hitting the security firm’s honeypots just three days after the patch was issued
“There has been only one actor to date that has attempted exploitation of CVE-2026-58231 so does not seem to be widespread,” Simo Kohonen, founder and CEO of Defused, told Cybersecurity Dive
Defused said that no proof of concept had been issued previously, nor had the vulnerability previously been exploited.
The vulnerability allows attackers to abuse a default authentication client. Successful exploitation could potentially lead to arbitrary code execution, and internal components could be compromised.
The vulnerability has a severity score of 10, which is the highest level of potential impact.
SAP Commerce Cloud is an enterprise-level platform that helps businesses run e-commerce stores.
SAP in 2024 rolled out cloud-based payments capabilities tobeef up serviceson its e-commerce platform.
