Hackers Started to Exploit Critical SAP Commerce Cloud, Still No Public PoC

Threat actors have begun actively probing and attempting to exploit a maximum-severity flaw in SAP Commerce Cloud, just three days after official security fixes were released. Defused honeypot telemetry captured the first wave of unauthenticated remote-execution traffic circulating across the web, despite the complete absence of a public proof of concept. Tracked as CVE-2026-58231, the security defect carries a critical CVSS score of 10.0, representing the highest possible severity rating for enterprise software. The vulnerability enables unauthenticated adversaries to execute arbitrary code remotely over the network without requiring user interaction or existing privileges. Because SAP Commerce Cloud underpins large-scale global...

Read the full article at the source.