CVE-2026-32100 | Shopware up to 2.0.15/3.0.11/4.0.6 /api/_info/config information disclosure (GHSA-64rg-pgjv-4v33)

A vulnerability was found in Shopware up to 2.0.15/3.0.11/4.0.6. It has been declared as problematic. This affects an unknown part of the file /api/_info/config. The manipulation results in information disclosure.

This vulnerability was named CVE-2026-32100. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.