{"items":[{"id":"CVE-2026-108697","published":"2026-10-11T13:25:58.117Z","updated":"2026-10-13T13:38:06.767Z","title":"CoreShop through 2026.2.2 Missing Authorization via ResourceController listAction","severity":"MEDIUM","score":5.3,"vendor":"CoreShop","product":"CoreShop","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-41249","published":"2026-06-04T19:26:46.043Z","updated":"2026-06-08T19:15:02.639Z","title":"CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration","severity":"HIGH","score":8.2,"vendor":"coreshop","product":"CoreShop","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2026-23959","published":"2026-01-22T01:57:58.566Z","updated":"2026-01-22T16:28:21.076Z","title":"CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier","severity":"MEDIUM","score":6.9,"vendor":"coreshop","product":"CoreShop","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2026-22242","published":"2026-01-08T09:59:24.849Z","updated":"2026-01-08T14:26:19.902Z","title":"CoreShop Vulnerable to SQL Injection via Admin Reports","severity":"MEDIUM","score":4.9,"vendor":"coreshop","product":"CoreShop","kev":false,"epss":0.00425,"kevAdded":null}]}