A vulnerability was found in Shopware up to 6.6.10.15/6.7.8.1. It has been declared as critical. This issue affects some unknown processing. Such manipulation leads to authentication bypass by spoofing.

This vulnerability is uniquely identified as CVE-2026-31889. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.