- Description
- Due to improper Spring Security configuration, SAP Commerce Cloud allows an unauthenticated user to perform malicious input injection, resulting in arbitrary server-side code execution, leading to high impact on Confidentiality, Integrity, and Availability of the application.
- Source
- cna@sap.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 9.6
- Impact score
- 6
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
- cna@sap.com
- CWE-459
- Hype score
- Not currently trending
CVE-2026-34263: Improper Spring Security Configuration in SAP Commerce Cloud - What It Means for Your Business and How to Respond https://t.co/ErElCtHoP9
@integ_sec
25 May 2026
33 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
SAP patches critical Commerce Cloud RCE and S/4HANA SQL injection (CVE-2026-34263, CVE-2026-34260) https://t.co/KVSTqRbr7I
@ToolsLib
14 May 2026
43 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Top 5 Trending CVEs: 1 - CVE-2026-21510 2 - CVE-2026-46300 3 - CVE-2026-41096 4 - CVE-2026-0300 5 - CVE-2026-34263 #cve #cvetrends #cveshield #cybersecurity https://t.co/4Fua3CAN6W
@CVEShield
14 May 2026
128 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
【SAP S/4HANAとCommerce CloudにCritical、CVE-2026-34260/34263を優先適用】 SAPの2026年5月Security Patch Dayで、SAP S/4HANAのCVE-2026-34260とSAP Commerce CloudのCVE-2026-34263が修正されました。Singapore CSAは、いずれもCVSS 9.6のCriticalとして
@01ra66it
14 May 2026
526 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Warning: #SAP patched a critical SQL injection vulnerability in SAP S/4HANA CVE-2026-34260 CVSS: 9.6 and missing authentication check in SAP Commerce cloud CVE-2026-34263 CVSS: 9.6 #Patch #Patch #Patch https://t.co/s94PU19HvL
@CCBalert
13 May 2026
152 Impressions
1 Retweet
1 Like
0 Bookmarks
0 Replies
0 Quotes
SAP、Commerce CloudとS/4HANAのCriticalな脆弱性に対処：CVE-2026-34263、CVE-2026-34260 | Codebook｜Security News https://t.co/oWtheG7BBQ
@ohhara_shiojiri
13 May 2026
63 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Top 5 Trending CVEs: 1 - CVE-2026-34078 2 - CVE-2026-31431 3 - CVE-2024-27867 4 - CVE-2026-3854 5 - CVE-2026-34263 #cve #cvetrends #cveshield #cybersecurity https://t.co/4Fua3CAN6W
@CVEShield
13 May 2026
129 Impressions
0 Retweets
1 Like
1 Bookmark
0 Replies
0 Quotes
NEW THREAT INTEL: SAP May 2026 HotNews -- CVE-2026-34263 Commerce Cloud RCE + CVE-2026-34260 S/4HANA SQLi, both CVSS 9.6. https://t.co/yahuthQdMr #ThreatIntel #SAP #CVE https://t.co/KgJrffYnku
@threadlinqs
12 May 2026
65 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
SAP Patch Day: 0 credentials needed to own Commerce Cloud (CVE-2026-34263, CVSS 9.6). S/4HANA SQL injection CVE-2026-34260 already under active attack. Apply SAP Notes 3733064 + 3724838 before EOD. https://t.co/hi6Gy04edk #SAP #CVE #PatchNow #CyberSecurity #RCE
@DecryptionDigst
12 May 2026
63 Impressions
0 Retweets
2 Likes
0 Bookmarks
1 Reply
0 Quotes