CVE-2026-59527

An unauthenticated SQL injection vulnerability exists in MapSVG versions up to 8.14.0, allowing attackers to execute arbitrary SQL queries on the database. This critical flaw can lead to data exposure, manipulation, or deletion, posing significant risks to any organization utilizing affected versions. Organizations using MapSVG should prioritize immediate remediation to mitigate potential data breaches and system compromise.