Interchange News

• Remote code execution vulnerability patched

  Posted on August 8, 2026

  A critical remote code execution (RCE) vulnerability was found in the “quick question” admin feature. In default installations arbitrary Perl code can be injected and executed server-side by unauthenticated users. The Perl code normally runs within a Safe container which limits the scope of what it ... [more]

• Interchange Redis Sessions

  Posted on June 16, 2026

  Interchange now supports storing user sessions in Redis, a popular in-memory data store, as a core feature. Sessions are where Interchange keeps client state that makes a catalog operate as a continuous experience—the shopping cart, form values, login status, and other data that persist from one req... [more]

See earlier news about Interchange.