SAP Commerce Cloud Exploit: Critical RCE Alert

**Executive summary:** CVE-2026-58231 is a CVSS 10.0 critical improper-authorization vulnerability in SAP Commerce Cloud (Data Hub Adapter) that can enable unauthenticated remote code execution; SAP released a patch on 2026-08-11 and exploitation attempts were observed in honeypots three days later, so immediate patching, exposure reduction, and enhanced monitoring are strongly recommended.