CVE-2026-76154
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Sep 17, 2026
Vendor
unknown
Description
A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in another user's session by hosting a malicious style configuration, enabling escalation to Org Admin.