CVE-2025-7954

CVE-2025-7954 targets Shopware v6.6.10.4 and describes a race condition in the voucher system that allows bypassing voucher restrictions and exceeding usage limits. The issue arises during voucher validation, where non-atomic voucher checks can enable multiple checkouts to reuse limited or genera...

CVE-2025-7954 Race Condition in Shopware Voucher Submission

A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed usage limitations...