Critical SAP Commerce Cloud Flaw Under Active Exploit Three Days After Patch Release

·2 views

A critical unauthenticated remote code execution vulnerability, CVE-2026-58231, affecting SAP Commerce Cloud's Data Hub Adapter was patched by SAP on August 14, 2026. Attackers began attempting to exploit the flaw just three days after the patch was released, with activity detected by the Defused honeypot. The vulnerability allows external attackers to abuse a default authentication client and bypass input validation in the Data Hub Adapter, potentially enabling arbitrary code execution without any user interaction. SAP has issued Security Note 3771065 with a fix, and administrators are urged to update, restrict Data Hub Adapter access to trusted IPs, and isolate the component from the internet. Over 4,200 IPs flagged by Shadowserver represent product fingerprints rather than confirmed compromised or unpatched systems.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why the 'cheapest' AI model may cost more depending on your workload

Choosing the most cost-effective AI model depends not on leaderboard rankings but on the ratio of input to output tokens a specific workload generates. Models price input and output tokens differently, and that gap varies significantly — for example, Grok 4.3 charges only twice as much for output as input, while others charge five to six times more. A document classification task heavily skewed toward input tokens favors Claude Haiku 4.5 by 17%, whereas a code generation task with far more output tokens makes Grok 4.3 42% cheaper. Reliability also affects true cost: a model with a 20% failure rate that reroutes failed calls to a pricier fallback can erase its apparent savings entirely. Developers are advised to measure their own token ratios across real requests before comparing model prices.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Voice-Based Finance Tutor After Losing Money on a ₹6 Share Trade

A developer built FinEd Saathi, a voice-first financial literacy tutor, after personally losing around ₹50 on a ₹6 share trade due to a poor understanding of brokerage fees and taxes. The project was created in 10 days as part of the VoiceForBharat Edition hackathon under the Financial Services track. FinEd Saathi is designed for Indian market beginners and can explain topics such as stocks, mutual funds, ETFs, IPOs, and bonds through patient, conversational voice lessons. The app supports English, Hindi, and code-mixed speech using Deepgram Nova-3 for transcription, Gemini for teaching logic, LiveKit for real-time audio, and Murf Falcon 2 for low-latency text-to-speech. The project aims to bridge the gap between access to financial information and genuine understanding before users risk real money.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Data Types Control Memory, Meaning, and Math in Programming

Data types are fundamental instructions that tell a computer how to interpret binary data, how much memory to allocate, and which operations are valid for a given value. Without a data type, the same sequence of bits — such as 01000001 — could mean the integer 65 or the character 'A' depending on context. Java defines eight primitive types, ranging from 8-bit bytes to 64-bit doubles, each suited for different kinds of values and memory requirements. Choosing the wrong integer type can lead to overflow bugs, as seen when adding 1 to Java's maximum integer value wraps around to the most negative number. Floating-point types like float and double use the IEEE 754 standard to represent decimals across a wide range, but introduce precision trade-offs that programmers must account for.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Game Developer Shares Passion for Unity, Godot, and Indie Game Design

A game developer has introduced themselves on DEV Community, highlighting their work across Unity, Godot, and C++ for performance-focused projects. They describe their approach as iterative and prototype-driven, focusing on refining systems that prove effective. Their areas of deep interest include shaders, procedural generation, and the nuanced quality known as 'game feel.' Outside of building games, they actively play indie titles and study the design decisions behind them. They expressed openness to connecting with others in the game development community to discuss tools, engines, and mechanics.

0 comments Read more at DEV Community