This vulnerability (CVE-2026-73392) involves improper neutralization of special elements used in SQL commands (CWE-89) in the Super Store Finder product by highwarden. It allows unauthenticated attackers to perform SQL Injection on affected versions (<=7.8), enabling them to access or manipulate database information. The CVSS v3.1 score is 9.3, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. The impact is high confidentiality loss and low availability impact. No vendor advisory or patch information is available at this time.

The vulnerability enables unauthenticated remote attackers to inject SQL commands, potentially leading to unauthorized disclosure of sensitive data (high confidentiality impact) and limited disruption of service (low availability impact). Integrity impact is not indicated. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing web application firewalls or input validation controls as temporary mitigations, but these are not guaranteed to fully prevent exploitation.