Dynamic-link Library Injection Vulnerability in OSGeo Project MapServer
CVE-2026-30479

9.1CRITICAL

Key Information:

Vendor

OSGeo

Status
MapServer
Vendor
CVE Published:
9 April 2026

What is CVE-2026-30479?

A vulnerability exists in OSGeo Project MapServer, specifically prior to version 8.0, where a Dynamic-link Library Injection flaw allows attackers to execute arbitrary code through a specially crafted executable. This can lead to unauthorized access and manipulation of data, highlighting the importance of keeping software updated and secure.

References

https://mapserver.org/index.html
https://github.com/penjaminTester/Research/tree/main/CVE-...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.