CVE-2026-76154

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A stored cross-site scripting issue exists in the Geomap panel's MapLibre base layer. A user with the Editor role can execute arbitrary JavaScript within another user's session by hosting a malicious style configuration, which can lead to privilege escalation to Org Admin.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.