Researchers warn that a critical vulnerability in SAP Commerce Cloud is facing exploitation just days after the company issued a patch.
Defused, a firm that specializes in threat intelligence, said Friday that it detected initial exploitation activity against the flaw, which is tracked as CVE-2026-58231, according to a post on X. Exploitation began hitting the security firm’s honeypots just three days after the patch was issued, according to Defused.
“There has been only one actor to date that has attempted exploitation of CVE-2026-58231 so does not seem to be widespread,” Simo Kohonen, founder and CEO of Defused, told Cybersecurity Dive via email.
Defused said that no proof of concept had been issued previously, nor had the vulnerability previously been exploited.
The vulnerability allows attackers to abuse a default authentication client. Successful exploitation could potentially lead to arbitrary code execution, and internal components could be compromised.
The vulnerability has a severity score of 10, which is the highest level of potential impact.
SAP Commerce Cloud is an enterprise-level platform that helps businesses run e-commerce stores.
SAP in 2024 rolled out cloud-based payments capabilities to beef up services on its e-commerce platform.
