Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

CVE-2026-73183: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Get Maps Marker Pro Maps Marker Pro

0
Critical
Published: 08/19/2026 (08/19/2026, 15:32:25 UTC)
Source: CVE Database V5
Vendor/Project: Get Maps Marker Pro
Product: Maps Marker Pro

Description

Unauthenticated SQL Injection in Maps Marker Pro <= 4.32 versions.

CVSS v3.1

Score 9.3critical

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
Low
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Affected software

Affected versions
<=4.32

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/19/2026, 13:24:46 UTC

Technical Analysis

CVE-2026-73183 is an unauthenticated SQL Injection vulnerability (CWE-89) in Maps Marker Pro, affecting versions up to 4.32. The flaw allows remote attackers to inject SQL commands without requiring authentication, which can lead to unauthorized disclosure of sensitive data (high confidentiality impact) and limited disruption of service (low availability impact). The vulnerability has a CVSS 3.1 base score of 9.3, indicating critical severity. There is no vendor advisory or patch information currently available, and no known active exploitation has been reported.

Potential Impact

The vulnerability enables unauthenticated attackers to execute SQL injection attacks, potentially exposing sensitive database information (high confidentiality impact) and causing limited denial of service (low availability impact). Integrity impact is not indicated. This could compromise the confidentiality of data managed by Maps Marker Pro.

Mitigation Recommendations

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application and monitor for unusual activity related to SQL injection attempts.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Data Version
5.2
Assigner Short Name
Patchstack
Date Reserved
2026-08-11T10:58:36.297Z
Cvss Version
3.1
State
PUBLISHED
Remediation Level
null

Threat ID: 6a85aa9bacd9273b4918fe2d

Added to database: 08/19/2026, 13:07:39 UTC

Last enriched: 08/19/2026, 13:24:46 UTC

Last updated: 08/19/2026, 17:55:48 UTC

Views: 2

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses