<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-13T22:33:58.293200+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/743ca359-00b5-4f01-8310-93af6694b77b/export</id>
    <title>743ca359-00b5-4f01-8310-93af6694b77b</title>
    <updated>2026-08-13T22:33:58.324087+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "743ca359-00b5-4f01-8310-93af6694b77b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998", "content": "", "creation_timestamp": "2026-08-13T08:47:17.727756Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/743ca359-00b5-4f01-8310-93af6694b77b/export"/>
    <published>2026-08-13T08:47:17.727756+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d767cd45-8112-4e46-82be-9804bf920d71/export</id>
    <title>d767cd45-8112-4e46-82be-9804bf920d71</title>
    <updated>2026-08-13T22:33:58.326508+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d767cd45-8112-4e46-82be-9804bf920d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html", "content": "SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.\n\nThe vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation.\n\n\"SAP Commerce Cloud allows an", "creation_timestamp": "2026-08-13T01:00:33.960863Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d767cd45-8112-4e46-82be-9804bf920d71/export"/>
    <published>2026-08-13T01:00:33.960863+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/99b609e6-1da5-4b1d-b847-0ca4ddb08c5b/export</id>
    <title>99b609e6-1da5-4b1d-b847-0ca4ddb08c5b</title>
    <updated>2026-08-13T22:33:58.328434+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "99b609e6-1da5-4b1d-b847-0ca4ddb08c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9785", "content": "\u26a0\ufe0f Warning: SAP Commerce Cloud flaw could enable arbitrary code execution.\n\nCVE-2026-58231 carries a CVSS 10.0 score and can be triggered by an unauthenticated attacker abusing a default authentication client with crafted input.\n\nSAP has released a fix. Patch and redeploy.\n\nRead: https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html", "creation_timestamp": "2026-08-13T00:00:44.031336Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/99b609e6-1da5-4b1d-b847-0ca4ddb08c5b/export"/>
    <published>2026-08-13T00:00:44.031336+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc2c95ad-d251-42ef-ac47-6823d4aa17d4/export</id>
    <title>dc2c95ad-d251-42ef-ac47-6823d4aa17d4</title>
    <updated>2026-08-13T22:33:58.328593+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc2c95ad-d251-42ef-ac47-6823d4aa17d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msvgffovw62o", "content": "CVE-2026-58231 is trending. Hype score 3, currently #7 on cvemon.\n\nSAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-58231", "creation_timestamp": "2026-08-12T15:17:43.709362Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc2c95ad-d251-42ef-ac47-6823d4aa17d4/export"/>
    <published>2026-08-12T15:17:43.709362+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e64e8c93-54e9-496c-b4ce-e06571903878/export</id>
    <title>e64e8c93-54e9-496c-b4ce-e06571903878</title>
    <updated>2026-08-13T22:33:58.328702+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e64e8c93-54e9-496c-b4ce-e06571903878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3msv4abmpbk2x", "content": "The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation. thehackernews.com/2026/08/sap-...", "creation_timestamp": "2026-08-12T12:15:54.969807Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e64e8c93-54e9-496c-b4ce-e06571903878/export"/>
    <published>2026-08-12T12:15:54.969807+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ce816702-e853-47c1-9638-e68b00ff4c67/export</id>
    <title>ce816702-e853-47c1-9638-e68b00ff4c67</title>
    <updated>2026-08-13T22:33:58.328802+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ce816702-e853-47c1-9638-e68b00ff4c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117082485344615304", "content": "The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation. https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html", "creation_timestamp": "2026-08-12T12:15:47.240884Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ce816702-e853-47c1-9638-e68b00ff4c67/export"/>
    <published>2026-08-12T12:15:47.240884+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c1d42cb7-478d-456f-812a-7cb614b52021/export</id>
    <title>c1d42cb7-478d-456f-812a-7cb614b52021</title>
    <updated>2026-08-13T22:33:58.328901+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c1d42cb7-478d-456f-812a-7cb614b52021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3msv2taxeoo2g", "content": "SAP managed to score a flawless 10.0 CVSS rating on CVE-2026-58231 because checking for user authorization was apparently optional in Commerce Cloud Data Hub Adapter. This oversight graciously invited unauthenticated remote attackers to execute code and takeover internal componen...\n\nRead full story", "creation_timestamp": "2026-08-12T11:50:43.309436Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c1d42cb7-478d-456f-812a-7cb614b52021/export"/>
    <published>2026-08-12T11:50:43.309436+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d0529414-0989-4f4a-8674-a4cc3abac3f5/export</id>
    <title>d0529414-0989-4f4a-8674-a4cc3abac3f5</title>
    <updated>2026-08-13T22:33:58.329002+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d0529414-0989-4f4a-8674-a4cc3abac3f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html", "content": "SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.\n\nThe vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation.\n\n\"SAP Commerce Cloud allows an", "creation_timestamp": "2026-08-12T10:02:01.271026Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d0529414-0989-4f4a-8674-a4cc3abac3f5/export"/>
    <published>2026-08-12T10:02:01.271026+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/45fde95a-6bc5-4fff-a251-8c6bb219ceee/export</id>
    <title>45fde95a-6bc5-4fff-a251-8c6bb219ceee</title>
    <updated>2026-08-13T22:33:58.329107+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "45fde95a-6bc5-4fff-a251-8c6bb219ceee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9785", "content": "\u26a0\ufe0f Warning: SAP Commerce Cloud flaw could enable arbitrary code execution.\n\nCVE-2026-58231 carries a CVSS 10.0 score and can be triggered by an unauthenticated attacker abusing a default authentication client with crafted input.\n\nSAP has released a fix. Patch and redeploy.\n\nRead: https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html", "creation_timestamp": "2026-08-12T09:00:04.234153Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/45fde95a-6bc5-4fff-a251-8c6bb219ceee/export"/>
    <published>2026-08-12T09:00:04.234153+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/84b90a40-0aae-416e-acca-2d3f0cf06dc6/export</id>
    <title>84b90a40-0aae-416e-acca-2d3f0cf06dc6</title>
    <updated>2026-08-13T22:33:58.329216+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "84b90a40-0aae-416e-acca-2d3f0cf06dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58231", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3msuoucsgum22", "content": "SAP Commerce Cloud CVSS 10.0 RCE Flaw: Patch Now Before Unauthenticated Attackers Get There First\n\nhttps://blindthoughts.com/sap-commerce-cloud-cvss-10-rce-cve-2026-58231\n\n#vulnerability #remotecodeexecution #sap #patchnow #enterprisesecurity", "creation_timestamp": "2026-08-12T08:16:33.834125Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/84b90a40-0aae-416e-acca-2d3f0cf06dc6/export"/>
    <published>2026-08-12T08:16:33.834125+00:00</published>
  </entry>
</feed>
