{"vulnerability": "CVE-2026-111406", "sightings": [{"uuid": "32cc71f8-f139-45ea-b06b-f35cc595adbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-111406", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117467108212198420", "content": "CVE-2026-111406: CRITICAL in MapSVG (<=8.16.1) enables low-priv attackers to upload web shells, risking full server compromise. Patch unconfirmed \u2014 restrict uploads & monitor closely. CVSS 9.9 https://radar.offseq.com/threat/cve-2026-111406-unrestricted-upload-of-file-with-dangerous-type-in-pt-norther-lights-production-mapsvg-52b0ef5cfb7ca193 #OffSeq #CVE2026111406 #infosec #websecurity", "creation_timestamp": "2026-10-19T10:30:26.742906Z"}, {"uuid": "f9c2a9f3-4d3e-425d-9699-a07739e81444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-111406", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3my7w2e7bhh2a", "content": "CRITICAL: CVE-2026-111406 in MapSVG (<8.16.2) lets attackers upload web shells for full server compromise. Restrict uploads, monitor activity, and check vendor for fixes. https://radar.offseq.com/threat/cve-2026-111406-unrestricted-upload-of-file-with-dangerous-type-in-pt-norther-lights-productio...", "creation_timestamp": "2026-10-19T10:30:29.128985Z"}, {"uuid": "54357a9a-7282-4e62-b399-dfc373e93fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111406", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5xheeilvodb6s", "content": "CVE-2026-111406 - WordPress MapSVG plugin\nCVE ID : CVE-2026-111406\n \n Published : Oct. 19, 2026, 9:09 a.m. | 54\u00a0minutes ago\n \n Description : Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps...", "creation_timestamp": "2026-10-19T10:31:41.899110Z"}]}