Platform

This hub aggregates every CVE we track for Platform, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Platform.

• CVE-2026-91079Huly Platform through 0.7.426 SSRF via Print Service8.5Sep 14, 2026
• CVE-2026-81846runZero MCP 'Findings summaries' Data Leak3.5Sep 1, 2026
• CVE-2026-48012Shopware SSO referer trust leading to an arbitrary redirect target4.3Jul 23, 2026
• CVE-2026-48013Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation4.1Jul 23, 2026
• CVE-2026-48009Shopware: Admin Account Takeover via User Recovery Hash Exposure6.8Jul 17, 2026
• CVE-2026-48014Shopware: Admin API ACL Bypass in Order State Transition Endpoints6.5Jul 17, 2026
• CVE-2026-48010Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts6.5Jul 17, 2026
• CVE-2026-48016Shopware: Unauthorized Payment Trigger for Foreign Orders via /store-api/handle-payment4.3Jul 17, 2026
• CVE-2026-48015Shopware: Stored XSS via SVG file upload — no SVG sanitization4.9Jul 17, 2026
• CVE-2026-48008Shopware: Privilege Escalation via Sync API Integration Admin Flag Bypass6.5Jul 17, 2026
• CVE-2026-56769Huly Platform - Server-Side Request Forgery via /import Endpoint8.5Jun 25, 2026
• CVE-2026-7778runZero Platform dashboard configuration exposure5.0May 5, 2026
• CVE-2026-5384runZero Platform incorrect credential scope5.8Apr 7, 2026
• CVE-2026-5382runZero Platform MCP endpoint information leak3.0Apr 7, 2026
• CVE-2026-5381runZero Platform task information leak2.2Apr 7, 2026