CVE-2026-0521

MEDIO 6.1CVE-2026-0521 · Published 06/02/2026 · updated 17/06/2026

In breve

CVE-2026-0521 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda map+ (tydac).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.30%, superiore al 22.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
map+ tydac	`= 3.4.0`	No fix yet

Description

A reflected cross-site scripting (XSS) vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through various means, for instance, by sending a link or by tricking victims to visit a page crafted by the attacker. This issue was verified in MAP+: 3.4.0.

References

redguard.ch/blog/2026/02/05/advisory-tydac-mapplus · Exploit
tydac.ch/en/mapplus · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free