SAP Commerce Cloud

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions6
First seenAug 12, 2026
Last mentioned17d ago

Timeline

6 articles · newest first

SAP security advisory – October 2026 monthly rollup (AV26-1030)

Canadian Cyber Centre urges patching after SAP's October 2026 rollup affects multiple products.

Canadian Centre for Cyber SecurityOct 13, 13:27 UTC · 17d agoAdvisory1

SAP Security Updates September 2026 – Critical Flaws Patched in SAP NetWeaver, Cloud and Extended Passport

SAP's September 2026 Patch Day fixes 19 notes including CVE-2026-44756 (CVSS 10.0), unauthenticated memory corruption in SAP Extended Passport Processing kernels.

Cyber Security NewsSep 8, 11:19 UTC · Sep 8, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+173 · 2 reads

SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws

SAP's September 2026 Patch Tuesday ships 19 security notes, including four criticals led by a CVSS 10.0 memory-corruption flaw in Extended Passport Processing.

GBHackersSep 8, 10:24 UTC · Sep 8, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+84 · 2 reads

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A maximum-severity (CVSS 10.0) unauthenticated RCE flaw in SAP Commerce Cloud, CVE-2026-58231, is under active exploitation days after patching.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2026-58231 CVE-2025-313243 · 3 reads

SAP Commerce Cloud CVE-2026

Attackers actively exploit unauthenticated RCE CVE-2026-58231 (CVSS 10.0) in SAP Commerce Cloud days after patch release.

Security AffairsAug 15, 17:14 UTC · Aug 15, 2026Exploit / PoCExploitedCVE-2026-582312 · 1 read

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

SAP patched a CVSS 10.0 unauthenticated RCE flaw (CVE-2026-58231) in Commerce Cloud's Data Hub Adapter, plus three critical flaws in NetWeaver and Manufacturing.

The Hacker NewsAug 12, 07:31 UTC · Aug 12, 2026VulnerabilityCVE-2026-58231 CVE-2026-44772 CVE-2026-34265+11 · 1 read

Related CVEs

by mentions

CVE-2026-58231<1%10.0
Unauthenticated Code Injection RCE in SAP Commerce Cloud
published Aug 11, 2026SAP Commerce CloudPoC
CVE-2026-44756<1%10.0
Unauthenticated buffer overflow in SAP Kernel Extended Passport (EPP) processing
published Sep 8, 2026SAP Kernel (Extended Passport Protocol (EPP) processing library)
CVE-2026-58240<1%9.8
Unauthenticated Component Registration Flaw in SAP NetWeaver Message Server
published Sep 8, 2026SAP NetWeaver Message Server
CVE-2026-23321%9.1
In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here
published Apr 14, 2026eclipse jettyPoC
CVE-2026-66768<1%9.0
Trust Level Policy Bypass Enables RCE in SAP GUI for Java
published Sep 8, 2026SAP GUI for Java
CVE-2026-58243<1%8.8
SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute…
published Aug 11, 2026
CVE-2026-76958<1%8.5
XXE Injection in SAP Integration Suite Allows Sensitive File Read via Logs
published Sep 8, 2026SAP Integration Suite (certain internal components that accept XML documents from untrusted sources)
CVE-2026-66767<1%7.7
Unauthenticated Session Hijack via Buffered Request Replay in SAP NetWeaver AS for ABAP
published Sep 8, 2026SAP NetWeaver Application Server for ABAP
CVE-2026-44766<1%6.5
Authenticated SQL Injection in SAP S/4HANA Intercompany Matching and Reconciliation
published Sep 8, 2026SAP S/4HANA — Intercompany Matching and Reconciliation (IMR) component
CVE-2026-76968<1%6.5
Authenticated Information Disclosure in SAP Web Dispatcher, ICM and Content Server
published Sep 8, 2026SAP Web Dispatcher

Appears with

SAPvendor · 6
SAP NetWeaverproduct · 3
SAP Web Dispatcherproduct · 3
Onapsisorganization · 2
SAP Integration Suiteproduct · 2
SAPorganization · 2
SAP S/4HANAproduct · 2
Defused Cyberorganization · 2
SAP GUI for Javaproduct · 2
Canadian Centre for Cyber Securityorganization · 1
Onapsisvendor · 1
NetWeaver Business Clientproduct · 1
SecurityAffairsorganization · 1
SAP Manufacturing Integration and Intelligenceproduct · 1
SAP Kernelproduct · 1
KEVIntelorganization · 1

Entities are extracted by the model from each article. First seen Aug 12, 2026, last mentioned 17d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.