PL
Product
platform
by shopware · last CVE Jul 23, 2026
11
CVEs
0
On KEV
8.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 9Low 0
Watch

Add platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-31889
8.9
0%
Mar 11
Shopware has a potential take over of app credentials
Affected: >= 6.7.0.0, < 6.7.8.1; < 6.6.10.15
CVE-2026-31887
7.5
0%
Mar 11
Shopware unauthenticated data extraction possible through store-api.order endpoint
Affected: >= 6.7.0.0, < 6.7.8.1; < 6.6.10.15
Showing 2