CVE-2026-44672criticalCWE-94

CVE-2026-44672: critical vulnerability in mapfish-print

mapfish-print: Remote Code Injection (RCE) in Dynamic table

Published

Follow this CVE+ Monitor mapfish-print+ Monitor mapfish print

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.3%
mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
camptocamp · mapfish_printmapfish · mapfish-printorg.mapfish · print.print-liborg.mapfish · print.print-servlet
Related CVEs — mapfish-print

In the same product, most dangerous first.

CVE-2020-15232CRITICALXML External Entity attack in mapfish-printEPSS 1.3%CVE-2020-15231CRITICALCross-site scripting attack in mapfish-printEPSS 0.8%CVE-2026-55848HIGHmapfish-print: XXE on MapFish Print allows reading arbitrary files of certain typesEPSS 0.5%