Skip to content
OpenAdvisories

Product · shopware

core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.9
    CVE-2026-31889

    Shopware has a potential take over of app credentials

    Shopware is an open commerce platform. Prior to 6.6.10.15 and 6.7.8.1, a vulnerability in the Shopware app registration flow that could, under specific conditions, allow attackers to take over the communication channel between a shop and an app. The legacy ap…

    shopware platform core shopware/platform Packagist
  • High 8.9
    CVE-2026-31887

    Shopware unauthenticated data extraction possible through store-api.order endpoint

    Shopware is an open commerce platform. Prior to 6.7.8.1 and 6.6.10.15, an insufficient check on the filter types for unauthenticated customers allows access to orders of other customers. This is part of the deepLinkCode support on the store-api.order endpoint…

    shopware platform core shopware/platform Packagist