What is CVE-2026-44761?

CVE-2026-44761 is a critical-severity vulnerability in Sap_se Sap Commerce Cloud, classified under CWE-1392. CVSS score: 9.1/10. Published 2026-07-14.

How severe is CVE-2026-44761?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Vulnerability in Sap_se Sap Commerce Cloud

CVE-2026-44761

SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentation. If left unchanged, an unauthenticated attacker could use th…

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Sap_se Sap Commerce Cloud — versions HY_COM 2205, COM_CLOUD 2211, 2211-JDK21

Weakness classification (CWE)

CWE-1392

References

cna@sap.com
cna@sap.com

Frequently asked questions

What is CVE-2026-44761?: CVE-2026-44761 is a critical-severity vulnerability in Sap_se Sap Commerce Cloud, classified under CWE-1392. CVSS score: 9.1/10. Published 2026-07-14.
How severe is CVE-2026-44761?: Critical severity. CVSS v3 base score is 9.1 out of 10.