Veille CVE

Lundi 19 octobre 2026

2 CVE

  1. CVE-2026-111406 9.9 Critique

    PT Norther Lights Production MapSVG

    Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1.

  2. CVE-2026-111398 7.7 Élevée

    PT Norther Lights Production MapSVG

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.16.1.