CVE-2026-52693

CriticalCVSS 9.3

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile — higher than 21% of all known CVEs

Versions of the eCommerce Product Catalog up to 3.5.5 are vulnerable to unauthenticated SQL injection.

An attacker could exploit this vulnerability to gain access to sensitive data in the database, potentially leading to serious security breaches.

It is recommended to upgrade to the latest version of the eCommerce Product Catalog to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.