Platform

This hub aggregates every CVE we track for Platform, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Platform.

• CVE-2026-48012Shopware SSO referer trust leading to an arbitrary redirect target4.3Jul 23, 2026
• CVE-2026-48013Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation4.1Jul 23, 2026
• CVE-2026-48009Shopware: Admin Account Takeover via User Recovery Hash Exposure6.8Jul 17, 2026
• CVE-2026-48014Shopware: Admin API ACL Bypass in Order State Transition Endpoints6.5Jul 17, 2026
• CVE-2026-48010Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts6.5Jul 17, 2026
• CVE-2026-48016Shopware: Unauthorized Payment Trigger for Foreign Orders via /store-api/handle-payment4.3Jul 17, 2026
• CVE-2026-48015Shopware: Stored XSS via SVG file upload — no SVG sanitization4.9Jul 17, 2026
• CVE-2026-48008Shopware: Privilege Escalation via Sync API Integration Admin Flag Bypass6.5Jul 17, 2026
• CVE-2026-56769Huly Platform - Server-Side Request Forgery via /import Endpoint8.5Jun 25, 2026
• CVE-2026-7778runZero Platform dashboard configuration exposure5.0May 5, 2026
• CVE-2026-5384runZero Platform incorrect credential scope5.8Apr 7, 2026
• CVE-2026-5382runZero Platform MCP endpoint information leak3.0Apr 7, 2026
• CVE-2026-5381runZero Platform task information leak2.2Apr 7, 2026
• CVE-2026-5380runZero Platform cleartext secret exposure5.3Apr 7, 2026
• CVE-2026-5379runZero Platform MCP certification information leak3.0Apr 7, 2026