> TritonInfoSec News
Home / Aug 19, 2026 / Story
0
#7 The Hacker News general August 15, 2026 at 08:38 UTC

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

By [email protected] (The Hacker News)

AI Summary

CVE-2026-58231, a CVSS 10.0 maximum-severity authentication bypass in SAP Commerce Cloud, is being actively exploited within days of its patch release, allowing unauthenticated attackers to abuse a default authentication client to submit unauthorized requests. The vulnerability stems from insufficient authorization checks and input validation. SAP Commerce Cloud administrators must apply the patch immediately, as exploit attempts are already confirmed in the wild.

Read full article → https://thehackernews.com/2026/08/sap-commerce-clo…

Relevance score: 82.0/100

# More from August 19

  1. 1
    Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps The Hacker News
  2. 2
    Clop created custom web shell for Windchill data theft attacks BleepingComputer
  3. 3
    Philips and GE investigating Clop ransomware data theft claims BleepingComputer
  4. 4
    More than 200 victims of Medusa ransomware identified over the last year, CISA says The Record
  5. 5
    Critical GitLab Zero-Click Flaw Poses Mitigation Challenges Dark Reading
  6. 6
    Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access The Hacker News
  7. 8
    TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks The Hacker News
  8. 9
    CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE The Hacker News
  9. 10
    Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware The Hacker News