CVE-2026-58231 — Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

CVE-2026-58231

Improper Authorization in SAP Commerce Cloud (Data Hub Adapter) PUBLISHED

Description (CNA)

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Commerce Cloud (Data Hub Adapter)	affected COM_CLOUD 2211; affected 2211-JDK21

CWE

CWE-94

References

https://me.sap.com/notes/3771065
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.