shopware core vulnerabilities

3 published CVEs name shopware core among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 3
Critical: 0
Known exploited: 0

Critical 0High 2Medium 1Low 0Not scored 0

Newest CVEs

CVE-2026-31889
Shopware has a potential take over of app credentials
shopware · core
High8.9
CVE-2026-31888
Shopware has user enumeration via distinct error codes on Store API login endpoint
shopware · core
Medium5.3
CVE-2026-31887
Shopware unauthenticated data extraction possible through store-api.order endpoint
shopware · core
High8.9

Most common weaknesses