CVE-2026-58231
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
- State
- Published
- Severity
- 10.0 Critical
- Published
- Aug 11, 2026
- Updated
- Aug 12, 2026
- Reserved
- Jun 29, 2026
Description
SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 10.0 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | sap |
Weaknesses
- CWE-94 Improper Control of Generation of Code
Affected Products
| Product | Versions |
|---|---|
SAP Commerce Cloud (Data Hub Adapter)SAP_SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.