CVE-2026-33721

nvd.nist.gov • May 22, 2026

This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.

MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD (Styled Layer Descriptor) parser lets a remote, unauthenticated attacker crash the MapServer process by sending a crafted SLD with more than 100 Threshold elements inside a ColorMap/Categorize structure (commonly reachable via WMS GetMap with SLD_BODY). Version 8.6.1 patches the issue.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Anthropic Discloses 1,596 Vulnerabilities in Open Source Projects Anthropic has launched a coordinated vulnerability disclosure dashboard, revealing 1,596 vulnerabilities across 281 open-source projects as of May 22, 2026. The vulnerabilities were identified using the Claude Mythos Preview tool, with 97 confirmed patched and 88 assigned CVE or GHSA identifiers. The dashboard emphasizes that the disclosed vulnerabilities represent a subset of total findings, as human triage is the limiting factor in reporting. Project names and bug types are withheld until maintainers release fixes, ensuring a collaborative relationship with developers. The dashboard aims to improve transparency in open-source security by tracking remediation progress and providing visibility into the volume of discovered vulnerabilities. 9 sources 43

Extracted Entities

CVE-2026-33721

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)