Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Product

GeoServer

Made by OSGeo. 2 of its vulnerabilities are known to have been exploited.

Coverage

No recent stories mention this product.

Actively exploited

CVE-2025-58360CVSS 9.8

OSGeo GeoServer

OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

Added Dec 11, 2025Fed. due Jan 1, 2026
CVE-2024-36401CVSS 9.8

OSGeo GeoServer

OSGeo GeoServer GeoTools Eval Injection Vulnerability

Added Jul 15, 2024Fed. due Aug 5, 2024