CVE-2026-65455
Received
Received - Intake
Arbitrary File Upload in MapSVG <= 8.14.0
Vulnerability report for CVE-2026-65455, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-07-23
Last updated on: 2026-07-23
Assigner: Patchstack
Description
Description
Administrator Arbitrary File Upload in MapSVG <= 8.14.0 versions.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mapsvg | administrator_arbitrary_file_upload | to 8.14.0 (inc) |
| mapsvg | administrator_arbitrary_file_upload | 8.14.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-434 | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |