Live › vulnerability › CVE-2026-111397
Go to dashboardThe MapSVG Lite interactive vector maps plugin, made by PT Norther Lights Production, lacks an authorization check that lets requests retrieve sensitive data embedded in maps. Versions through 8.16.1 are affected according to NVD.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the MapSVG plugin at version or earlier that embed maps containing data they do not want public. The sources do not say which configuration or request path is needed to reach the data. Sites without the plugin can skip it.
8.16.1No product ranges from the sources yet.
8.16.18.16.1 once the vendor publishes one; the sources do not name a fixed versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: from n/a through 8.16.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-111397")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.