Patchfirst
Patchfirst
CVE-2026-58231 Public exploit Critical · 10.0 EPSS 0.9%

Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

SAP_SE · SAP Commerce Cloud (Data Hub Adapter)

Summary

The flaw is an improper authorization issue in the Data Hub Adapter component of SAP Commerce Cloud, where a default authentication client can be abused and certain functions fail to validate submitted input. An unauthenticated attacker with network access can exploit it without user interaction or special configuration, and successful exploitation could enable arbitrary code execution and compromise internal components of the application.

Official description · CVE.org

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.

Breakdown
71.5 / 100
Exploited
Yes, in VulnCheck KEV
Reports
0
Tactics
0/15

First seen exploited 3 days after disclosure. Public exploit code (PoC-in-GitHub) appeared 4 days after disclosure.

  1. Disclosedday 0
  2. First seen exploitedVulnCheck KEV evidence+3 days
  3. Public exploit codePoC-in-GitHub+4 days

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 17 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

2 links, grouped by NVD tag

Other 2

me.sap.com/notes/3771065url.sap/sapsecuritypatchday
↑ ↓ chooseEnter openEsc close