Shopware

    Dashboard / Vendors

    Products: 5
    Vulnerabilities: 79
    Known Exploited: 0
    4
    Critical Level Threats
    25
    High Level Threats
    45
    Medium Level Threats
    5
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-48012

    Shopware SSO referer trust leading to an arbitrary redirect target

    Last Modified: Jul 24, 2026
    Published: Jul 23, 2026

    CVE-2026-48013

    Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation

    Last Modified: Jul 24, 2026
    Published: Jul 23, 2026

    CVE-2026-48009

    Shopware: Admin Account Takeover via User Recovery Hash Exposure

    Last Modified: Jul 17, 2026
    Published: Jul 17, 2026

    CVE-2026-48014

    Shopware: Admin API ACL Bypass in Order State Transition Endpoints

    Last Modified: Jul 21, 2026
    Published: Jul 17, 2026

    CVE-2026-48010

    Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts

    Last Modified: Jul 17, 2026
    Published: Jul 17, 2026
    Items Per Page
    Shopware Vulnerabilities & Security CVEs | CVE-DB