Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-32142 is a medium severity vulnerability in Shopware commercial versions prior to 7.8.1 and 6.10.15. It involves an information exposure issue where the /api/_info/config endpoint leaks license-related data to unauthorized actors without requiring authentication or user interaction. The vulnerability has a CVSS score of 5.3, indicating moderate risk primarily to confidentiality. No known exploits are currently reported in the wild. Organizations using affected Shopware versions should upgrade to the fixed releases to prevent potential information disclosure that could aid attackers in reconnaissance or further attacks. Join the discussion | CVE Database V5 | 03/12/2026, 18:17:35 UTC Added: 03/12/2026, 18:47:41 UTC |
CVE-2026-31889 is a high-severity authentication bypass vulnerability in Shopware core affecting versions prior to 6.6.10.15 and 6.7.8.1. It arises from the legacy app registration flow where HMAC-based authentication does not sufficiently bind a shop installation to its original domain. Attackers who possess the app-side secret can abuse the re-registration process to update the shop URL without proving control over the original domain. This allows targeted hijacking of app communication, redirecting traffic to attacker-controlled domains and potentially stealing API credentials. Join the discussion | CVE Database V5 | 03/11/2026, 18:56:23 UTC Added: 03/11/2026, 19:29:48 UTC |
CVE-2026-31888 is a medium-severity vulnerability in Shopware core versions prior to 6.7.8.1 and 6.6.10.15. It arises from an observable response discrepancy in the Store API login endpoint, which returns different error codes and messages depending on whether an email address is registered or not. This behavior allows unauthenticated attackers to enumerate valid customer accounts by probing email addresses. The storefront login controller does not exhibit this flaw, indicating inconsistent error handling between components. Join the discussion | CVE Database V5 | 03/11/2026, 18:53:03 UTC Added: 03/11/2026, 18:59:52 UTC |
Showing 1 to 3 of 3 results