Which versions of Element maps-ng are affected by CVE-2026-66155?

Siemens Element maps-ng contains a reflected cross-site scripting vulnerability that could allow attackers to compromise user sessions and steal sensitive data when users click on malicious links.

How to fix or mitigate CVE-2026-66155?

Within 24 hours, identify all instances of Siemens Element maps-ng in production and assess deployed versions (V47.x, V48.x, V49.x). Implement user awareness messaging warning against clicking external Element maps-ng URLs and disable public sharing of map URLs. Within 7 days, initiate upgrades to patched versions: V47 to V47.12.3 or later, V48 to V48.11.3 or later, and V49 to V49.16.1 or later; if immediate upgrades are not feasible, deploy Web Application Firewall rules to filter XSS payloads in si-map component parameters and enforce strict Content Security Policy headers to block inline script execution. Within 30 days, complete all upgrades across affected systems, audit access logs for exploitation attempts dated after vulnerability disclosure, and implement endpoint monitoring to detect anomalous session activity.

Element maps-ng CVE-2026-66155

Q: What is the CVSS score of CVE-2026-66155?

CVE-2026-66155 has a CVSS 4.0 base score of 7.0 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-67006 HIGH

Cross-site Scripting (XSS) (CWE-79)

2026-08-27 siemens

XSS Element Maps Ng V47 Element Maps Ng V48 Element Maps Ng V49

7.0

CVSS 4.0 · Vendor: siemens

Severity by source

Vendor (siemens) PRIMARY

7.0 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.4 MEDIUM

Network-delivered reflected XSS requiring low privileges and user hover interaction; scope changes to victim browser, with limited confidentiality and integrity impact.

3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (siemens).

CVSS VectorVendor: siemens

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Scope

Lifecycle Timeline

Analysis Generated

Aug 27, 2026 - 13:33 vuln.today

CVSS changed

Aug 27, 2026 - 13:22 NVD

7.6 (HIGH) 7.0 (HIGH)

CVE Published

Aug 27, 2026 - 11:56 cve.org

HIGH 7.0

DescriptionCVE.org

A vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), Element maps-ng V49 (All versions < V49.16.1). The si-map component does not properly neutralize user-controllable input of the points property that is used to render the tooltip label of map pins. This could allow an attacker to craft a malicious URL that, when loaded by a victim and the map pin is hovered over, executes arbitrary script code within the victim's browser session.

AnalysisAI

Reflected cross-site scripting in Siemens Element maps-ng allows a network-accessible attacker with low privileges to execute arbitrary JavaScript in a victim's browser session by crafting a malicious URL containing an unsanitized payload in the si-map component's points property. Affected are all V47 builds prior to V47.12.3, all V48 builds prior to V48.11.3, and all V49 builds prior to V49.16.1. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires the victim to be using an affected version of Siemens Element maps-ng (V47 < V47.12.3, V48 < V48.11.3, or V49 < V49.16.1) and to have the application loaded in a browser session. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N) scores at 7.0, reflecting network reachability, low complexity, low-privilege access, and a passive user interaction requirement (hovering over a pin). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Vendor-released patches are available: upgrade Element maps-ng V47 to V47.12.3 or later, V48 to V48.11.3 or later, and V49 to V49.16.1 or later, per Siemens Security Advisory SSA-682041 at https://cert-portal.siemens.com/productcert/html/ssa-682041.html. … Detailed patch versions, workarounds, and compensating controls in full report.