Vulnerabilities in CoreShop

4 results

CVE-2026-41249HIGHCoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` ConfigurationEPSS 0.5%CVE-2026-23959MEDIUMCoreShop Vulnerable to SQL Injection via Admin customer-company-modifierEPSS 0.4%CVE-2026-22242MEDIUMCoreShop Vulnerable to SQL Injection via Admin ReportsEPSS 0.4%CVE-2026-108697MEDIUMCoreShop through 2026.2.2 Missing Authorization via ResourceController listActionEPSS 0.2%