CVE-2026-48012 shopware CVE debrief

Who should care

Organizations using Shopware versions 6.7.3.0 through 6.7.10.0 should apply version 6.7.10.1 to address the open redirect vulnerability. Additionally, organizations should review and update Shopware configurations to prevent exploitation and monitor for suspicious activity related to the public SSO entry point. Affected operators, platforms, and security teams should prioritize patching and review compensating controls for exposed systems.

Technical summary

The open redirect vulnerability in Shopware versions 6.7.3.0 through 6.7.10.0 allows an unauthenticated request to turn the public SSO entry point into a reusable redirect primitive whose destination is fully controlled by attacker-supplied request metadata. The vulnerability is due to the application falling back to the request's Referer header and using that value as the redirect destination when the endpoint is reached without the expected SSO session state. This issue can be used for phishing chains, branded redirect abuse, and cases where client software automatically follows redirects issued by a trusted host.

Defensive priority

Organizations using Shopware versions 6.7.3.0 through 6.7.10.0 should apply version 6.7.10.1 to address the open redirect vulnerability.

Recommended defensive actions

• Apply version 6.7.10.1 to address the open redirect vulnerability
• Review and update Shopware configurations to prevent exploitation
• Monitor for suspicious activity related to the public SSO entry point
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD detail provide information about the open redirect vulnerability in Shopware versions 6.7.3.0 through 6.7.10.0. The vulnerability allows an unauthenticated request to turn the public SSO entry point into a reusable redirect primitive whose destination is fully controlled by attacker-supplied request metadata. Evidence is limited, and defenders should verify affected scope and configurations.

Official resources