CVE-2026-73388 is an SQL Injection vulnerability (CWE-89) in TeconceTheme Nikstore Core affecting all versions up to 1.5. The vulnerability allows unauthenticated attackers to inject special elements into SQL commands, which can compromise the confidentiality of the database and cause partial denial of service. The CVSS 3.1 score is 9.3 (critical) with vector AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L, indicating network attack vector, low attack complexity, no privileges or user interaction required, with a scope change and high confidentiality impact but no integrity impact and low availability impact.

An unauthenticated attacker can exploit this SQL Injection vulnerability to extract sensitive data from the database, leading to a complete confidentiality breach. The vulnerability also causes partial availability impact, potentially disrupting service. There is no indication of integrity impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No temporary or official fixes are currently documented.