CVE-2026-58231: Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

Published Aug 11, 2026

Updated

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.

Affected Software

1 affected component

SAP SAP Commerce Cloud (Data Hub Adapter)

Event History

Aug 11, 2026

CVE Published

via MITRE·10:21 AM

Data Sourced

via MITRE·10:21 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:17 AM

DescriptionSeverityWeakness

Aug 14, 2026

News Published

via BleepingComputer·01:45 PM

News Published

via BleepingComputer·01:46 PM

Frequently Asked Questions

What is the severity of CVE-2026-58231?

CVE-2026-58231 has a critical severity rating of 10.

What vulnerabilities does CVE-2026-58231 exploit?

CVE-2026-58231 exploits improper authorization allowing code injection in SAP Commerce Cloud.

How can I fix CVE-2026-58231?

Fixing CVE-2026-58231 requires applying the latest security patches released by SAP.

Who is affected by CVE-2026-58231?

SAP Commerce Cloud users, particularly those using the Data Hub Adapter, are affected by CVE-2026-58231.

What impact does successful exploitation of CVE-2026-58231 have?

Successful exploitation of CVE-2026-58231 can lead to arbitrary code execution and compromise internal components.