vulnerability
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
Critical
Summary
SAP has released patches to address a critical security flaw in its Commerce Cloud (Data Hub Adapter) that could allow unauthenticated attackers to execute arbitrary code. This vulnerability stems from insufficient authorization checks and input validation, posing a significant risk to data confidentiality, integrity, and availability. SAP has also addressed three other critical vulnerabilities within the August 2026 update.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data