Vulnerabilities Hackers Exploiting Unpatched GeoServer Zero-Day The security defect is described as an SQL injection that could allow attackers to achieve remote code execution. Ionut ArghireAugust 14, 2026
Vulnerabilities Recent GeoServer Vulnerability Exploited in Attacks Because user input is not sufficiently sanitized, attackers could exploit the flaw to define external entities within an XML request. Ionut ArghireDecember 12, 2025
Vulnerabilities GeoServer Flaw Exploited in US Federal Agency Hack The hackers remained undetected for three weeks, deploying China Chopper, remote access scripts, and reconnaissance tools. Ionut ArghireSeptember 24, 2025
Vulnerabilities Organizations Warned of Exploited GeoServer Vulnerability CISA says it has evidence that a recent critical-severity vulnerability in GeoServer is exploited in the wild. Ionut ArghireJuly 16, 2024