All 6 CVE vulnerabilities found in MapServer, with AI-generated Chinese analysis, references, and POCs.
Vendor: MapServer
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54355 | MapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST` CWE-79 | 5.3 | Medium | 2026-09-17 |
| CVE-2026-54354 | MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translation CWE-89 | 8.2 | High | 2026-09-17 |
| CVE-2026-45104 | MapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY` CWE-129 | 7.5 | High | 2026-05-27 |
| CVE-2026-42030 | MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewer CWE-80 | 6.1 | Medium | 2026-05-08 |
| CVE-2026-33721 | MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing CWE-787 | 5.3 | Medium | 2026-03-27 |
| CVE-2025-59431 | MapServer - WFS XML Filter Query SQL injection CWE-89 | 9.8AI | Critical AI | 2025-09-19 |
All 6 known CVE vulnerabilities affecting MapServer with full Chinese analysis, references, and POCs where available.