SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

Back Thehackernews

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

Thehackernews •[email protected] (The Hacker News) • August 12, 2026

Share: View original

AI can find and chain vulnerabilities in minutes. This session gives you a practical roadmap to strengthen visibility, response, and remediation.

AI is helping teams ship code 10–50× faster. This session shows how to keep security from falling behind.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated attackers to execute arbitrary code remotely and affects versions 25.3.1 or earlier of Remote Support and 24.3.4 or earlier of Privileged Remote Access. Users are advised to apply the patches released on February 6, 2026, to mitigate the risk of exploitation. 860 sources 67

Extracted Entities

CWE Weaknesses (1)

CWE-94 - Code Injection

Platforms (1)

SAP Commerce Cloud