CVE-2022-42496: Kujirahand NADESIKO3

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.

Affected products

• Kujirahand NADESIKO3: up to and including 3.3.74

Published 2022-12-05. Last modified 2026-06-17.