What does BroadVision cover in its News & Insights?

Practical analysis and field reports from active engagements, managed IT, networks, cloud migration, cybersecurity, data and AI, drawn from BroadVision's work worldwide and 47 countries.

How often does BroadVision publish news?

We publish in-depth posts weekly, plus shorter project notes whenever a meaningful deployment, threat advisory or vendor change warrants it.

Where is BroadVision based?

BroadVision HUB is in Mulberry Hill Office Park, 4 Broadacres Drive, Dainfern, Johannesburg. Our teams operate worldwide and 47 countries.

The IT pulse, every Friday.

A weekly briefing on the developments shaping enterprise IT, cloud, AI, cybersecurity and SaaS, sourced from reputable publishers across the past seven days, interpreted by BiVi Intelligence for IT leaders, with every story linked back to its original report. The previous fortnight stays available below.

Cybersecurity

SAP Commerce Cloud CVE-2026-58231 Faces Active Exploitation Attempts

15 August 2026

SAP Commerce Cloud is experiencing active exploitation of CVE-2026-58231, a maximum-severity vulnerability involving insufficient authorization checks and input validation.

SAP Commerce Cloud CVE-2026-58231 Faces Active Exploitation Attempts

A critical security vulnerability in SAP Commerce Cloud, identified as CVE-2026-58231, is currently being targeted by active exploitation attempts. The flaw has received a maximum CVSS score of 10.0, indicating the highest level of severity for enterprise environments. These exploitation efforts began only days after the security patch was initially released to the public.

The vulnerability stems from a combination of insufficient authorization checks and improper input validation within the platform. According to security reports, the flaw allows an unauthenticated attacker to abuse a default authentication client. By manipulating this default client, threat actors can submit unauthorized requests to the system, potentially compromising sensitive commerce data and internal operations.

Security researchers have observed that attackers are moving quickly to leverage the bug before organizations can complete their patching cycles. SAP has released updates to address the underlying authorization issues, but the speed of the exploitation attempts highlights the risk to organizations that lag in their deployment of emergency security fixes.

For IT directors and operations leaders, this development necessitates an immediate review of SAP Commerce Cloud instances to ensure they are fully patched. The active nature of these attacks means that systems remaining on older versions are at immediate risk of unauthorized access. Organizations should prioritize these updates to maintain the integrity of their commerce infrastructure and customer data.

The BroadVision view

This high-severity threat highlights the critical need for rapid patching cycles and robust identity management in cloud-based enterprise platforms. Mid-market IT teams should focus on securing default authentication configurations to prevent unauthorized access. Implementing proactive monitoring can help teams detect and mitigate risks through comprehensive strategic IT services. Teams weighing what to change first can review BroadVision's managed IT services.

Have a story for us, or a problem we can write about?

Get in touch