Project

SAP Commerce Cloud

SAP Commerce Cloud, formerly Hybris, is an e-commerce platform for building and managing B2B and B2C online storefronts and order management.

Known aliases

COM_CLOUD 2211
COM_CLOUD 2211-JDK21
Commerce Cloud
Hybris
SAP Commerce Cloud Data Hub Adapter
SAP Hybris

Current stories

securityConfirmed4 publishers

Three days from patch to probe: SAP Commerce Cloud RCE is already being hunted

CVE-2026-58231 is an unauthenticated, CVSS 10.0 code execution bug in Commerce Cloud's Data Hub Adapter. Defused says attempts hit its honeypots three days after patch day.

Publishers:bleepingcomputer.com scworld.com securityaffairs.com securityweek.com

Perspective Coverage

4 publishers

Builder: Builder 21%
Operator: Operator 66%
Investor: Investor 13%

Reality

Evidence62
Adoption55
Hype gap+25
Incentives45
Confidence68

productOne report1 publisher

SAP patches a kernel flaw that lets unauthenticated requests run OS commands as SAP admin

Onapsis, which found the flaw alongside SAP, rates it CVSS 10.0 and recommends immediate patching. A second kernel note in the same batch reaches every S/4HANA 2025 system and any older release already on a current kernel.

Publishers:onapsis.com

Reality

Evidence55
Adoption20
Hype gap+25
Incentives75
Confidence48

productOne report1 publisher

Fourteen of SAP's 33 August notes are top-severity: build the named-system list this week

Five HotNews and nine High Priority notes land on Commerce Cloud, NetWeaver AS ABAP and MII, and two of the described fixes are not finished when the patch is applied.

Publishers:onapsis.com

Reality

Evidence62
Adoption25
Hype gap+12
Incentives72
Confidence55

buildOne report1 publisher

A Commerce Cloud RCE chain reached a honeypot three days after the patch shipped

CVE-2026-58231 chains a default auth client with missing input validation in SAP's Data Hub Adapter. The fix needs a rebuild and redeploy; the attackers needed 72 hours.

Publishers:dev.to

Reality

Evidence42
Adoption28
Hype gap+12
Incentives38
Confidence44

securityOne report1 publisher

SAP's CVSS 10.0 Commerce Cloud bug needs a re-deploy, not just a patch window

CVE-2026-58231 lets an unauthenticated attacker reach code execution via the Data Hub Adapter. Onapsis says the fix is patch then re-deploy, with an IP filter set as the stopgap.

Publishers:thehackernews.com

Reality

Evidence70
Adoption18
Hype gap+8
Incentives55
Confidence62