A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts.

The vulnerability, tracked as CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It relates to an instance of insufficient authorization checks and input validation.

“SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit