https://feed.craftedsignal.io/products/mapsvg-n/a-through-8.16.3/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 11:42:55 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-mapsvg-auth-bypass/Mon, 09 Nov 2026 11:42:55 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-mapsvg-auth-bypass/The PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps plugin contains a missing authorization vulnerability that allows for the exploitation of incorrectly configured access control security levels.<p>CVE-2026-123475 is a missing authorization vulnerability in the PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps plugin. This vulnerability allows for the exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 8.16.3.</p> highadvisoryauthorization-bypasscve-2026-123475