Camptocamp vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Camptocamp products: 1 record(s), with severity, exploitation and fixes.

Mapfish Print 1

Exploited only (KEV) →

CVE-2026-44672 Critical · 9.3 CWE-94 May 28, 2026

mapfish-print: Remote Code Injection (RCE) in Dynamic table

mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3.