CyberSecBulletin

Mapfish vulnerabilities

We track 2 vulnerabilities in Mapfish products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2026.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest Mapfish vulnerabilities

  • 8.6 High severity

    mapfish-print: Improper Restriction of XML External Entity Reference

    CVE-2026-55848Mapfish

    mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML p

  • 9.3 Critical severity

    mapfish-print: Improper Control of Generation of Code

    CVE-2026-44672Mapfish

    mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is f