Organisations operating SAP platforms should urgently assess whether their environments are affected by recently disclosed critical vulnerabilities.
Among them is CVE-2026-58231, a CVSS 10.0 vulnerability affecting SAP Commerce Cloud that could allow an unauthenticated attacker to achieve arbitrary code execution under affected configurations.
Additional critical vulnerabilities affect SAP Manufacturing Integration and Intelligence and NetWeaver/ABAP environments.
SAP platforms are commonly used to support sensitive organisational processes such as finance, procurement, manufacturing, customer services and enterprise resource management.
Kenyan organisations operating affected systems should identify vulnerable versions, prioritise externally accessible systems and apply available security updates.
Patching should also be followed by a review for evidence of earlier compromise where exposure existed before remediation.
Protecting enterprise platforms is not simply a software-maintenance responsibility. Failure of these systems can disrupt critical organisational and business operations.