Max severity SAP Commerce Cloud flaw now targeted in attacks

CVE-2026-58231 in SAP Commerce Cloud reached maximum severity due to an improper authorization flaw that allows unauthenticated remote code execution — one of the most dangerous vulnerability profiles possible. Attackers began exploiting this flaw within just three days of a patch being released, highlighting the razor-thin window organizations have to remediate critical vulnerabilities before threat actors weaponize them. The fact that exploitation was confirmed by third-party honeypot intelligence before SAP's own advisory was updated underscores a dangerous gap between vendor disclosure timelines and real-world attack activity. Organizations running SAP Commerce Cloud without rapid patching processes are at severe risk of full system compromise affecting confidentiality, integrity, and availability.