https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T13:58:39.216793+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-233730 EUVD-2026-233730 2026-10-16T13:58:39.219727+00:00 EUVD-2026-233730 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36101 fkie_cve-2022-36101 2026-10-16T13:58:39.219758+00:00

Shopware is an open source e-commerce software. In affected versions the request for the customer detail view in the backend administration contained sensitive data like the hashed password and the session ID. These fields are now explicitly unset in version 5.7.15. Users are advised to update and may get the update either via the Auto-Updater or directly via the download overview. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-6vfq-jmxg-g58r GHSA-6vfq-jmxg-g58r — Shopware contains sensitive data in backend customer module 2026-10-16T13:58:39.219789+00:00

Affected: Packagist: shopware/shopware

### Impact The request for the customer detail view in the backend administration contained sensitive data like the hashed password and the session ID.

### Patches We recommend updating to the current version 5.7.15. You can get the update to 5.7.15 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/changelog-sw5/#5-7-15

For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html

### References https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-09-2022

 https://cve.radiocsirt.org/vuln/gsd-2022-36101 gsd-2022-36101 2026-10-16T13:58:39.219818+00:00 gsd-2022-36101