<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 22 Oct 2026 14:22:59 +0000</lastBuildDate>
    <item>
      <title>EUVD-2026-234206</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-234206</link>
      <description>EUVD-2026-234206</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-234206</guid>
    </item>
    <item>
      <title>fkie_cve-2022-24871</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2022-24871</link>
      <description>&lt;p&gt;Shopware is an open commerce platform based on Symfony Framework and Vue. In affected versions an attacker can abuse the Admin SDK functionality on the server to read or update internal resources. Users are advised to update to the current version 6.4.10.1. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. There are no known workarounds for this issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Shopware is an open commerce platform based on Symfony Framework and Vue. In affected versions an attacker can abuse the Admin SDK functionality on the server to read or update internal resources. Users are advised to update to the current version 6.4.10.1. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. There are no known workarounds for this issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2022-24871</guid>
    </item>
    <item>
      <title>GHSA-7gm7-8q8v-9gf2 — Server-Side Request Forgery (SSRF) in Shopware</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-7gm7-8q8v-9gf2</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: shopware/platform, Packagist: shopware/core&lt;/p&gt;
&lt;p&gt;### Impact&lt;/p&gt;
&lt;p&gt;The  attacker can abuse the Admin SDK functionality on the server to read or update internal resources.&lt;/p&gt;
&lt;p&gt;### Patches&lt;/p&gt;
&lt;p&gt;We recommend updating to the current version 6.4.10.1. You can get the update to 6.4.10.1 regularly via the Auto-Updater or directly via the download overview.&lt;/p&gt;
&lt;p&gt;https://www.shopware.com/en/download/#shopware-6&lt;/p&gt;
&lt;p&gt;### Workarounds&lt;/p&gt;
&lt;p&gt;For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: shopware/platform, Packagist: shopware/core&lt;/p&gt;
&lt;p&gt;### Impact&lt;/p&gt;
&lt;p&gt;The  attacker can abuse the Admin SDK functionality on the server to read or update internal resources.&lt;/p&gt;
&lt;p&gt;### Patches&lt;/p&gt;
&lt;p&gt;We recommend updating to the current version 6.4.10.1. You can get the update to 6.4.10.1 regularly via the Auto-Updater or directly via the download overview.&lt;/p&gt;
&lt;p&gt;https://www.shopware.com/en/download/#shopware-6&lt;/p&gt;
&lt;p&gt;### Workarounds&lt;/p&gt;
&lt;p&gt;For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-7gm7-8q8v-9gf2</guid>
    </item>
    <item>
      <title>gsd-2022-24871</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2022-24871</link>
      <description>gsd-2022-24871</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2022-24871</guid>
    </item>
  </channel>
</rss>
