SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-65455

CRITICAL · CVSS 9.1 EPSS 0.37%

Source: NVD + CISA KEV + EPSS · Published 2026-07-23 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability allows administrators of MapSVG versions up to 8.14.0 to upload arbitrary files, potentially leading to remote code execution or unauthorized access to sensitive data. Organizations using affected versions should prioritize remediation due to the critical severity rating, as exploitation could compromise system integrity and confidentiality. Immediate action is recommended for those managing web applications utilizing this plugin.

CVE
CVE-2026-65455
Severity
CRITICAL
CVSS
9.1
EPSS
0.37%

Original NVD Description

Administrator Arbitrary File Upload in MapSVG <= 8.14.0 versions.