Serial Number: AV26-798
Date: August 11, 2026
Updated: August 17, 2026
As of August 11, 2026, SAP is affected by vulnerabilities in the following products:
- SAP Commerce Cloud (Data Hub Adapter)
- Versions COM_CLOUD 2211 and 2211-JDK21
- SAP Manufacturing Integration and Intelligence
- Versions XMII 15.4, 15.5, MII_ADMIN 15.4 and 15.5
- SAP NetWeaver and ABAP Platform
- Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.22EXT2, 7.22EXT3, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16 9.18, 9.19, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16, 9.18 and 9.19
- SAP Manufacturing Integration and Intelligence
- Version MII 15.4, 15.5
- SAP Change and Transport System Attach Tool (ctsattach)
- Version CTS_UPLOAD_CLT 1
- SAP ABAP Developer Tools
- Versions AP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816 and SAP_BASIS 918, SAP_BASIS 920
- SAP Commerce Cloud
- Versions OM_CLOUD 2211, 2211-JDK21 and DHUB_CLOUD 2211, 2211-JDK21
- SAP BusinessObjects Business Intelligence Platform (Central Management Server)
- Versions AP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816, SAP_BASIS 918, SAP_BASIS 920, ENTERPRISE 430, 2025 and 2027
- SAP Manufacturing Integration and Intelligence
- Versions MII 15.4 and 15.5
Update 1
Open-source reporting indicates that CVE-2026-58231 is being exploited in the wild.
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.