Description
SAP Commerce Cloud allows an unauthenticated
attacker to abuse a default authentication client and submit specially crafted
input to certain functions lacking sufficient validation. Successful
exploitation could enable arbitrary code execution and compromise internal
components, resulting in high impact on confidentiality, integrity, and
availability of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Commerce Cloud (Data Hub Adapter) | COM_CLOUD 2211, 2211-JDK21 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
HORKimhab/CVE-2026-58231 ★ 0 · Aug 15, 2026
CVE-2026-58231 Detection & Confirmation Script
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- WID-SEC-2026-2746 SAP Patch Day August 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 16, 2026
- NCSC-2026-0302 Kwetsbaarheden verholpen in SAP Commerce Cloud Data Hub Adapter NCSC-NL (Netherlands) · Aug 15, 2026