CVE-2025-7954

A race condition vulnerability has been identified in Shopware’s voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed usage limitations.

Assigner : security-research@sec-consult.com

More information : https://github.com/shopware/shopware/issues/11245