Login Request a demo
MA
Product
MapServer
by MapServer · last CVE Sep 17, 2026
5
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MapServer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42030
6.1
0%
May 8
MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewer
Affected: >= 6.0, < 8.6.2
CVE-2026-54355
5.3
0%
Sep 17
MapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST`
Affected: >= 6.0, < 8.6.4
Showing 2