> TritonInfoSec News
Home / Aug 18, 2026 / Story
0
#2 SecurityWeek general August 17, 2026 at 08:13 UTC

Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure

By Eduard Kovacs

AI Summary

CVE-2026-58231, a maximum-severity (CVSS 10.0) insufficient authorization flaw in SAP Commerce Cloud, was exploited in the wild just three days after its public disclosure. The vulnerability allows unauthenticated attackers to abuse a default authentication client for arbitrary code execution, underscoring the critical need for rapid patch deployment on internet-facing SAP deployments.

Read full article → https://www.securityweek.com/critical-sap-commerce…

Relevance score: 86.0/100

# More from August 18

  1. 1
    Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware The Hacker News
  2. 3
    Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects The Hacker News
  3. 4
    Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads The Hacker News
  4. 5
    Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner The Hacker News
  5. 6
    Microsoft working on Defender patch for ShieldBreak zero-day BleepingComputer
  6. 7
    Certighost and the Privilege Hiding in Your Certificate Authority BleepingComputer
  7. 8
    Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth The Hacker News
  8. 9
    Poland probes MyDr healthcare software breach potentially affecting 19 million people The Record
  9. 10
    Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups The Hacker News