Skip to content
Threat Feed

Product

Commerce Cloud

1 brief RSS
critical advisory

SAP Commerce Cloud Unauthenticated Remote Code Execution (CVE-2026-34263)

SAP Commerce Cloud is vulnerable to unauthenticated malicious configuration upload and code injection due to improper Spring Security configuration, resulting in arbitrary server-side code execution.

Commerce cloud CVE-2026-34263 rce sap spring security
2r 1t 1c