CVE-2026-42773

CriticalCVSS 9.3

Published: 25/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

30th percentile - higher than 30% of all known CVEs

Summary

SQL injection vulnerability in eMagicOne Store Manager allows an attacker to perform blind SQL queries due to improper neutralization of special elements in an SQL command. The issue affects versions up to 1.3.2.

Risk Assessment

An attacker can read sensitive data from the database, such as passwords or customer data, without needing direct output.

Recommendation

Immediately update to the latest available version of eMagicOne Store Manager that includes a fix for the SQL injection vulnerability.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eMagicOne eMagicOne Store Manager allows Blind SQL Injection. This issue affects eMagicOne Store Manager: from n/a through 1.3.2.