CoreShop CoreShop

• CVE-2026-108697 Medium 4.3 CoreShop through 2026.2.2 Missing Authorization via ResourceController listAction 0.3%
• CVE-2026-41249 High 8.2 CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration 0.5%
• CVE-2026-23959 Medium 6.9 CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier 0.4%
• CVE-2026-22242 Medium 4.9 CoreShop Vulnerable to SQL Injection via Admin Reports 0.4%