CVE-2026-58231
SAP Commerce Cloud allows an unauthenticated
attacker to abuse a default authentication client and submit specially crafted
input to certain functions lacking sufficient validation. Successful
exploitation could enable arbitrary code execution and compromise internal
components, resulting in high impact on confidentiality, integrity, and
availability of the application.
attacker to abuse a default authentication client and submit specially crafted
input to certain functions lacking sufficient validation. Successful
exploitation could enable arbitrary code execution and compromise internal
components, resulting in high impact on confidentiality, integrity, and
availability of the application.
타임라인
- NVD 공개
- 첫 보도 BleepingComputer · SAP, 최고 심각도인 'OVERPASS' 커널 취약점에 대해 경고
- 최근 보도 (총 3건) 보안뉴스 · 하위 도메인 값 하나로 인증 정보 유출... SAP, 파이썬 개발 도…
날짜 정보 없는 신호: 공개 PoC 2건
벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
공개 익스플로잇 / PoC
- GitHub 공개 PoC 2건 — 대표 레포 ↗