CVE-2026-48015 | Shopware prior 6.6.10.18/6.7.10.1 SVG file shopware.yaml unrestricted upload

A vulnerability categorized as problematic has been discovered in Shopware. This affects an unknown part of the file src/Core/Framework/Resources/config/packages/shopware.yaml of the component SVG file Handler. Such manipulation leads to unrestricted upload.

This vulnerability is listed as CVE-2026-48015. The attack may be performed from remote. There is no available exploit.