Skip to content

CVE-2026-34259

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
May 12, 2026
Last Seen
May 12, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

SAP Addresses Critical Vulnerabilities in Commerce Cloud and S/4HANA70.5

On May 12, 2026, SAP released security updates for 15 vulnerabilities, including two critical flaws in Commerce Cloud and S/4HANA. The first critical vulnerability (CVE-2026-34263) allows unauthenticated attackers to execute arbitrary code due to a missing authentication check. The second critical f...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Sql InjectionCVE-2026-34260CVE-2026-34263CWE-287 - Improper AuthenticationCWE-434 - Unrestricted Upload Of File With Dangerous TypeCWE-89 - SQL InjectionCWE-94 - Code InjectionSAP Commerce CloudSAP Enterprise For ABAPSAP Forecasting & ReplenishmentSAP HANA Deployment Infrastructure (hdi) Deploy LibrarySAP S/4HANA