← CVE Intelligence

CVE-2026-32142

shopware/commercial: `/api/_info/config` route exposes information about licenses PUBLISHED

Description (CNA)

Shopware is an open commerce platform. /api/_info/config route exposes information about licenses. This vulnerability is fixed in 7.8.1 and 6.10.15.

Affected (CNA)

Vendor / productVersions
shopware / commercialaffected >= 7.0.0, < 7.8.1; affected < 6.10.15

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.