Do Son An unpatched Shopware vulnerability, CVE-2026-104937, lets stored XSS steal admin tokens and lead to RCE in Shopware 6.7. Restrict media uploads now.
Shopware
A critical flaw, CVE-2024-22406 with a CVSS score of 9.3, poses a serious threat to businesses relying on this popular open-source platform