CVE-2026-65455

CriticalCVSS 9.1

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Summary

MapSVG versions up to 8.14.0 contain an Administrator Arbitrary File Upload vulnerability. An administrator can upload a malicious file, potentially leading to remote code execution on the server.

Risk Assessment

The risk includes arbitrary code execution by an administrator, potentially leading to full server compromise and data breach.

Recommendation

It is recommended to upgrade MapSVG to version 8.14.1 or later.

Original NVD description (English source)

Administrator Arbitrary File Upload in MapSVG <= 8.14.0 versions.