{"uuid": "99c58f2d-f496-481f-a017-c07f3bac67a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://t.me/pphm_HackerNews/2592", "content": "\ud83d\udd34 SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code\n\nSAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.\n\nThe vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation.\n\n\"SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation,\" according to a description of the flaw on CVE.org.", "creation_timestamp": "2026-08-23T00:00:47.798235Z"}