What’s Vulnerable › Products

CoreUnion CoreShop vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your CoreUnion CoreShop version is affected

Latest CoreUnion CoreShop vulnerabilities

• CVE-2026-119656 — CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList (CVSS 7.5)
• CVE-2026-119655 — CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList (CVSS 7.5)
• CVE-2026-108696 — CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReship (CVSS 4.3)