CVE-2026-44672 CRITICAL

CVE-2026-44672: mapfish-print: Remote Code Injection (RCE) in Dynamic table

Vendor Mapfish

Product mapfish-print

Weakness CWE-94 · Code injection

Published May 28, 2026

Last update May 28, 2026

View on NVD All CVEs

CVSS base score

9.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3.

Key dates

02Disclosure timeline

May 28, 2026 CVE published

May 28, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-44672 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

Identifiers

CVE CVE-2026-44672

CWE CWE-94

CVSS 9.3 / CRITICAL

Affected versions

Vendor Mapfish

Product mapfish-print

Affected >= 3.23.0, < 3.28.28

Vendor Mapfish

Product mapfish-print

Affected >= 3.29.0, < 3.30.30

Vendor Mapfish

Product mapfish-print

Affected >= 3.31.0, < 3.31.21

Vendor Mapfish

Product mapfish-print

Affected >= 3.32.0, < 3.33.14

Vendor Mapfish

Product mapfish-print

Affected >= 3.34.0, < 4.0.3

Vendor Camptocamp

Product mapfish_print

Affected >= 3.23.0, < 3.28.28

Vendor Camptocamp

Product mapfish_print

Affected >= 3.29.0, < 3.30.30

Vendor Camptocamp

Product mapfish_print

Affected >= 3.31.0, < 3.31.21

Vendor Camptocamp

Product mapfish_print

Affected >= 3.32.0, < 3.33.14

Vendor Camptocamp

Product mapfish_print

Affected >= 3.34.0, < 4.0.3

Vendor Org.mapfish

Product print.print-lib

Affected >= 3.23.0, < 3.28.28

Vendor Org.mapfish

Product print.print-lib

Affected >= 3.29.0, < 3.30.30

Vendor Org.mapfish

Product print.print-lib

Affected >= 3.31.0, < 3.31.21

Vendor Org.mapfish

Product print.print-lib

Affected >= 3.32.0, < 3.33.14

Vendor Org.mapfish

Product print.print-lib

Affected >= 3.34.0, < 4.0.3

Vendor Org.mapfish

Product print.print-servlet

Affected >= 3.23.0, < 3.28.28

Vendor Org.mapfish

Product print.print-servlet

Affected >= 3.29.0, < 3.30.30

Vendor Org.mapfish

Product print.print-servlet

Affected >= 3.31.0, < 3.31.21

Vendor Org.mapfish

Product print.print-servlet

Affected >= 3.32.0, < 3.33.14

Vendor Org.mapfish

Product print.print-servlet

Affected >= 3.34.0, < 4.0.3

CVE-2026-44672: mapfish-print: Remote Code Injection (RCE) in Dynamic table

01Description

02Disclosure timeline

03References

04Related CVE