Known Vulnerabilities for Commerce by HCLSoftware
Listed below are 10 of the newest known vulnerabilities associated with "Commerce" by "HCLSoftware".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49775 json | Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions. | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2026-48371 json | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged atta... | Not Provided | 2026-07-14 | 2026-07-15 |
| CVE-2026-48358 json | Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code ex... | Not Provided | 2026-07-14 | 2026-07-15 |
| CVE-2026-48356 json | Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary... | Not Provided | 2026-07-14 | 2026-07-15 |
| CVE-2026-48016 json | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the Store API endpoint /store-api/handle-payment in s... | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-48015 json | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, SVG files are in the allowed_extensions whitelist in ... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-48014 json | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the order state transition features /api/_action/orde... | Not Provided | 2026-07-17 | 2026-07-21 |
| CVE-2026-48011 json | Shopware is an open commerce platform. Prior to versions 6.6.10.18 and 6.7.10.1, an attacker is able to enumerate the usernam... | Not Provided | 2026-06-10 | 2026-06-11 |
| CVE-2026-48010 json | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, UserController::upsertUser() in src/Core/Framework/Ap... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-48009 json | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a low-privilege admin user with user_recovery:read AC... | Not Provided | 2026-07-17 | 2026-07-17 |