https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:26:14.022879+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-12080 bdu:2026-12080 2026-10-02T14:26:14.126657+00:00 bdu:2026-12080 https://cve.radiocsirt.org/vuln/euvd-2026-291831 EUVD-2026-291831 2026-10-02T14:26:14.126695+00:00 EUVD-2026-291831 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33721 fkie_cve-2026-33721 2026-10-02T14:26:14.126710+00:00

MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD (Styled Layer Descriptor) parser lets a remote, unauthenticated attacker crash the MapServer process by sending a crafted SLD with more than 100 Threshold elements inside a ColorMap/Categorize structure (commonly reachable via WMS GetMap with SLD_BODY). Version 8.6.1 patches the issue.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10452-1 openSUSE-SU-2026:10452-1 — libjavamapscript-8.6.1-1.1 on GA media 2026-10-02T14:26:14.126742+00:00

libjavamapscript-8.6.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33721 UBUNTU-CVE-2026-33721 2026-10-02T14:26:14.126762+00:00

Affected: Ubuntu:16.04:LTS: mapserver, Ubuntu:18.04:LTS: mapserver, Ubuntu:20.04:LTS: mapserver, Ubuntu:22.04:LTS: mapserver, Ubuntu:24.04:LTS: mapserver, Ubuntu:25.10: mapserver, Ubuntu:26.04:LTS: mapserver

MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD (Styled Layer Descriptor) parser lets a remote, unauthenticated attacker crash the MapServer process by sending a crafted SLD with more than 100 Threshold elements inside a ColorMap/Categorize structure (commonly reachable via WMS GetMap with SLD_BODY). Version 8.6.1 patches the issue.