← Database

CVE-2026-23498

HIGH CVSS: 7.2 Published: 2026-01-14 Modified: 2026-06-17

Description

Shopware is an open commerce platform. From 6.7.0.0 to before 6.7.6.1, a regression of CVE-2023-2017 leads to an array and array crafted PHP Closure not checked being against allow list for the map(...) override. This vulnerability is fixed in 6.7.6.1.

Affected Platforms

Shopware Shopware

Weakness Type

CWE-94

References