Recent GeoServer Vulnerability Exploited in Attacks

Back Securityweek

Recent GeoServer Vulnerability Exploited in Attacks

Securityweek • December 12, 2025

Share: View original

CISA warns that a critical XXE vulnerability in OSGeo GeoServer tracked as CVE-2025-58360 has been exploited in the wild.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GeoServer XXE Vulnerability Exploited in Cyber Attacks A recently discovered vulnerability in GeoServer, identified as CVE-2025-58360, allows attackers to exploit insufficiently sanitized user input to define external entities within XML requests. This flaw has been actively exploited in cyber attacks, affecting users of the GeoServer platform. 3 sources 36

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)

Vulnerabilities (1)