Skip to content

CVE-2026-85061

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
September 9, 2026
Last Seen
September 9, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical MapLibre GL JS Vulnerability Exposes Millions to Zero-Click Attacks70.5

A critical cross-site scripting vulnerability, CVE-2026-85061, has been disclosed in the MapLibre GL JS library, affecting versions 6.4.0 and earlier. This flaw allows for potential zero-click attacks, putting approximately 2.7 million users at risk. The vulnerability is rooted in the DOM.sanitize()...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

CWE-79 - Cross-site Scripting (xss)MapLibre GL JSXSS