SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A critical security vulnerability (CVE-2026-58231) in SAP Commerce Cloud is being actively exploited, despite a patch being available for days. The flaw stems from inadequate input validation, potentially leading to code execution and system compromise. Threat actors, including groups linked to China and ransomware gangs, have previously exploited similar SAP vulnerabilities. Customers are urged to immediately apply the patch and consider temporary mitigations to reduce risk.