Skip to content
OpenAdvisories

Vendor

sourcentis

2 known vulnerabilities.

Products

mercator 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-49344

    Mercator has a Personal Identifiable Information Leak from Query Executor feature

    Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, Mercator's Query Engine (`/admin/queries/execute`) accepts a JSON DSL (`from` / `select` / `filters` / `traverse` / `output`), translates i…

    sourcentis mercator