MapServer vulnerabilities
6 published CVEs name MapServer among the affected products.
- 6Published CVEs6 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54355
MapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST`
MapServer · MapServer
Medium5.3 - CVE-2026-54354
MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translation
MapServer · MapServer
High8.2 - CVE-2026-45104
MapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY`
MapServer · MapServer
High7.5 - CVE-2026-42030
MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewer
MapServer · MapServer
Medium6.1 - CVE-2026-33721
MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing
MapServer · MapServer
Medium5.3 - CVE-2025-59431
MapServer - WFS XML Filter Query SQL injection
MapServer · MapServer
High8.9