Where
-Infinity
0

Trending

Last week
Last month
Last year

Shopware Shopwareshopware/commercial: `/api/_info/config` route exposes information about licenses

Risk 19
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2026-32142

Shopware Shopwareswag/platform-security: `/api/_info/config` route exposes information about licenses and active security fixes

Risk 19
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2026-32100

Shopware ShopwareShopware has a potential take over of app credentials

Risk 53
Severity
8.9
EPSS
0.08%
First published (updated )
CVE-2026-31889

Shopware ShopwareShopware has user enumeration via distinct error codes on Store API login endpoint

Risk 19
Severity
5.3
EPSS
0.05%
First published (updated )
CVE-2026-31888

Shopware ShopwareShopware unauthenticated data extraction possible through store-api.order endpoint

Risk 33
Severity
8.9
EPSS
0.04%
First published (updated )
CVE-2026-31887
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/shopware/coreShopware Improper Control of Generation of Code in Twig rendered views

Risk 49
Severity
7.2
EPSS
0.06%
First published (updated )
CVE-2026-23498

composer/shopware/storefrontShopware's inproper input validation can lead to Reflected XSS through Storefront Login Page

Risk 47
Severity
7.1
First published (updated )
CVE-2025-67648

Shopware ShopwareRace Condition in Shopware Voucher Submission

Risk 54
Severity
6
EPSS
0.04%
First published (updated )
CVE-2025-7954

composer/shopware/platformBlind SQL-injection in DAL aggregations in Shopware

Risk 62
Severity
9.8
EPSS
0.09%
First published (updated )
CVE-2024-22406

composer/shopware/platformBroken Access Control order API in Shopware

Risk 28
Severity
6.5
EPSS
0.05%
First published (updated )
CVE-2024-22407
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Shopware ShopwareServer-Side Request Forgery (SSRF) in Shopware Flow Builder

Risk 43
Severity
8.1
EPSS
0.05%
First published (updated )
CVE-2024-22408

composer/shopware/shopwareImproper mail validation in Shopware

Risk 27
Severity
5.3
First published (updated )
CVE-2023-34099

composer/shopware/shopwareDependency configuration exposed in Shopware

Risk 27
Severity
5.3
First published (updated )
CVE-2023-34098

Shopware ShopwareImproper Control of Generation of Code in Twig Rendered Views in Shopware

Risk 79
Severity
8.8
First published (updated )
CVE-2023-2017

Shopware ShopwareAuthenticated server-side request forgery in file upload via URL.

Risk 79
Severity
8.8
First published (updated )
CVE-2021-37711
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Shopware ShopwareCross-Site Scripting via SVG media files

Risk 71
Severity
8
First published (updated )
CVE-2021-37710

Shopware ShopwareInsecure direct object reference of log files of the Import/Export feature

Risk 38
Severity
6.5
First published (updated )
CVE-2021-37709

Shopware ShopwareCommand injection in mail agent settings

Risk 86
Severity
9.8
First published (updated )
CVE-2021-37708

Shopware ShopwareManipulation of product reviews via API

Risk 43
Severity
7.5
First published (updated )
CVE-2021-37707

Shopware ShopwareXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2017-15374
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203