Shopware core
- CVE-2026-31889 Shopware has a potential take over of app credentials 0.3%
- CVE-2026-31888 Shopware has user enumeration via distinct error codes on Store API login endpoint 0.3%
- CVE-2026-31887 Shopware unauthenticated data extraction possible through store-api.order endpoint 0.3%