CVE-2026-65451 is a SQL Injection vulnerability (CWE-89) in RomanCode MapSVG versions up to 8.14.0. The issue arises from improper neutralization of special elements in SQL commands related to contributor input, enabling an attacker with network access and low privileges to execute unauthorized SQL commands. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity with network attack vector, low attack complexity, and no user interaction required. The impact includes high confidentiality loss and low availability impact. No patch or official remediation level has been published as of the data provided.

An attacker with low privileges and network access can exploit this vulnerability to execute unauthorized SQL commands, potentially leading to disclosure of sensitive data (high confidentiality impact) and limited disruption of service (low availability impact). Integrity impact is not indicated. This could compromise the security of the affected system's database.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published. Until a patch is available, restrict access to the affected application and monitor for suspicious activity related to SQL injection attempts.