Login Request a demo
MA
Product
MapServer
by MapServer · last CVE Sep 17, 2026
5
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MapServer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54354
8.2
1%
Sep 17
MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translation
Affected: >= 8.4.0, < 8.6.4
CVE-2026-45104
7.5
0%
May 27
MapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY`
Affected: >= 6.4.0, < 8.6.3
CVE-2026-33721
7.5
1%
Mar 27
MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing
Affected: >= 4.2, < 8.6.1
CVE-2026-42030
6.1
0%
May 8
MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewer
Affected: >= 6.0, < 8.6.2
CVE-2026-54355
5.3
0%
Sep 17
MapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST`
Affected: >= 6.0, < 8.6.4
Showing 5