[ Vendor · 1 CVEs ]
Shopware
CVEs affecting Shopware published in the last 30 days, plus any Shopware CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104937 | 13 Oct 2026 | CVSS 8.1 | ShopwareShopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling… |