Shopware Commercial vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Shopware Commercial: 1 record(s), with affected versions and fixes.

CVE-2026-32142 Medium · 5.3 CWE-200 Mar 12, 2026

shopware/commercial: `/api/_info/config` route exposes information about licenses

Shopware is an open commerce platform. /api/_info/config route exposes information about licenses. This vulnerability is fixed in 7.8.1 and 6.10.15.