Max severity SAP Commerce Cloud flaw now targeted in attacks

Impact

Successful exploitation enables unauthenticated remote code execution, potentially compromising internal components of SAP Commerce Cloud. This can lead to full compromise of the application’s confidentiality, integrity, and availability. Given the platform's use by major global retailers and brands, exploitation could have significant operational and data security consequences. Attackers can execute arbitrary code with low complexity, increasing the risk of widespread impact. Although no public proof-of-concept or confirmed active exploitation was initially reported by SAP, threat intelligence confirms active targeting in the wild shortly after patch release.