SAP Commerce Cloud RCE Flaw Exploited Just Days After Patch
A critical SAP Commerce Cloud remote code execution bug (CVE‑2026‑58231) was patched three days ago, yet threat intel firm Defused observed active exploitation on its honeypots. The flaw lets unauthenticated attackers run arbitrary code, jeopardizing any high‑profile e‑commerce site that hasn’t patched.