by Kastro
Paper/Archive/CVE-2026-44672

CVE-2026-44672

mapfish mapfish-print — mapfish-print: Remote Code Injection (RCE) in Dynamic table

EPSS 0.3%CVSS 9.3
critical.is priorityof 100
33
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 25.6.256 × 205.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3.

Affected

ProductAffectedFixed inSource
mapfish-print>= 3.23.0, < 3.28.28–CNA
mapfish-print>= 3.29.0, < 3.30.30–CNA
mapfish-print>= 3.31.0, < 3.31.21–CNA
mapfish-print>= 3.32.0, < 3.33.14–CNA
mapfish-print>= 3.34.0, < 4.0.3–CNA
mapfish_print>= 3.23.0, < 3.28.28–CNA
mapfish_print>= 3.29.0, < 3.30.30–CNA
mapfish_print>= 3.31.0, < 3.31.21–CNA
mapfish_print>= 3.32.0, < 3.33.14–CNA
mapfish_print>= 3.34.0, < 4.0.3–CNA
print.print-lib>= 3.23.0, < 3.28.28–CNA
print.print-lib>= 3.29.0, < 3.30.30–CNA

Scores by source

GitHub_M (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/mapfish/mapfish-print/security/advisories/GHSA-q7m6-wpvf-mvwx