SQL Injection Vulnerability in SAP Commerce Cloud

CVE-2026-89113

What is CVE-2026-89113?

SAP Commerce Cloud contains a vulnerability in its handling of user-supplied input, which fails to perform adequate validation before integrating this data into database queries. As a result, an authenticated user can craft malicious requests that inject arbitrary SQL commands. This exploitation may allow the attacker to gain unauthorized access to sensitive data, enabling them to read, modify, or delete crucial information stored within the database. The consequences of this vulnerability can severely undermine the confidentiality, integrity, and availability of the application, posing significant risks to data security.

References