Threat actors began probing SAP Commerce Cloud systems for a critical vulnerability just three days after a patch became available. DefusedCyber reported detecting the first exploitation attempts against CVE-2026-58231 within its honeypot systems on August 14. At that point, no public exploit code for the vulnerability had yet surfaced. A Critical, Unauthenticated Flaw in the Data Hub Adapter SAP addressed the vulnerability on August 11 as part of its monthly security update release.