CVE-2026-52693NVD

Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.

Severity Level

CRITICAL(9.3)

Published Date

Jun 15, 2026

Last Modified

Jun 15, 2026

Exploitation Status

????

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

Improper neutralization of special elements used in an SQL command, allowing attackers to modify queries.

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeChanged

ConfidentialityHigh

IntegrityNone

AvailabilityLow

CVE Watchtower