[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fh72EowPWdquXGbY_zXRX3mfBVZ-pe9Z7CCv-YZgB6_k":3},{"article":4,"iocs":48,"watch_terms":60,"solutions":61,"lesson":156},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"7fd43afd-30f2-4753-b75b-1157509340cb","Max severity SAP Commerce Cloud flaw now targeted in attacks","max-severity-sap-commerce-cloud-flaw-now-targeted-in-attacks-99dadd","A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according to threat intelligence company Defused. [...]","A critical remote code execution vulnerability in SAP Commerce Cloud, tracked as CVE-2026-58231, is already being actively exploited in the wild just three days after SAP released a patch. The flaw, stemming from an improper authorization weakness, allows unauthenticated attackers to execute arbitrary code with high impact on confidentiality, integrity, and availability. Threat intelligence firm Defused confirmed exploitation attempts hitting their honeypots, despite SAP not yet flagging it as actively exploited.","SAP Commerce Cloud RCE flaw (CVE-2026-58231) is actively exploited post-patch.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fmax-severity-sap-commerce-cloud-flaw-now-targeted-in-attacks\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F14\u002FSAP.jpg","2026-08-14T13:45:18+00:00","2026-08-14T14:00:24.970225+00:00",9,[17,20,23,26,28],{"name":18,"type":19},"SAP Commerce Cloud","product",{"name":21,"type":22},"SAP","vendor",{"name":24,"type":25},"e-commerce platform","technology",{"name":27,"type":25},"Data Hub Adapter",{"name":29,"type":19},"SAP Hybris","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,41,43],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[49,53,56,58],{"type":50,"value":51,"context":52},"cve","CVE-2026-58231","Maximum severity SAP Commerce Cloud RCE vulnerability",{"type":50,"value":54,"context":55},"CVE-2026-44761","Critical SAP Commerce Cloud vulnerability patched in July 2026",{"type":50,"value":57,"context":55},"CVE-2026-22732",{"type":50,"value":59,"context":55},"CVE-2026-34263",[21,18,29],{"controls":62,"vendors":149},[63,92,121],{"slug":64,"name":65,"problem":66,"products":67},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[68,76,84],{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":93,"name":94,"problem":95,"products":96},"patch-management","Automated patch management","Known holes get closed in days, not months.",[97,105,113],{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":47,"name":122,"problem":123,"products":124},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[125,133,141],{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",{"vendor_slug":142,"vendor_name":143,"vendor_logo":144,"product_slug":145,"product_name":146,"url":147,"description":148},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",[150],{"slug":151,"name":152,"logo_path":153,"roles":154},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png",[155],"reported_by",{"slug":157,"title":158,"body":159,"framework_refs":160,"framework_notes":171},"critical-sap-commerce-cloud-rce-exploited-within-days-of-patch-release","Critical SAP Commerce Cloud RCE Exploited Within Days of Patch Release","CVE-2026-58231 in SAP Commerce Cloud reached maximum severity due to an improper authorization flaw that allows unauthenticated remote code execution — one of the most dangerous vulnerability profiles possible. Attackers began exploiting this flaw within just three days of a patch being released, highlighting the razor-thin window organizations have to remediate critical vulnerabilities before threat actors weaponize them. The fact that exploitation was confirmed by third-party honeypot intelligence before SAP's own advisory was updated underscores a dangerous gap between vendor disclosure timelines and real-world attack activity. Organizations running SAP Commerce Cloud without rapid patching processes are at severe risk of full system compromise affecting confidentiality, integrity, and availability.",[161,162,163,164,165,166,167,168,169,170],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST CSF ID.RA-1: Asset vulnerabilities are identified and documented","NIST CSF RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks","SAP Security Baseline Template v2.4","ITIL Problem Management: Known Error and Workaround Documentation","OWASP Top 10: A01 Broken Access Control",{}]