Skip to content
CCoreShop
Products
| Product | CVEs | Exploited | Latest |
|---|
| CoreShop | 4 | – | Oct 11, 2026 |
Exploited and recent CVEs
-
CVE-2026-108697
Medium 4.3
CoreShop through 2026.2.2 Missing Authorization via ResourceController listAction
0.3%
-
CVE-2026-41249
High 8.2
CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration
0.5%
-
CVE-2026-23959
Medium 6.9
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
0.4%
-
CVE-2026-22242
Medium 4.9
CoreShop Vulnerable to SQL Injection via Admin Reports
0.4%