GeoServer XXE Vulnerability Exploited in Cyber Attacks

GeoServer XXE Vulnerability Exploited in Cyber Attacks

First seen 12 Dec 2025, 13:50 UTC •RedditFeeds.FeedburnerSecurityweek •84% similarity •35.5

Article Content

Browse articles
ThreatCluster

A recently discovered vulnerability in GeoServer, identified as CVE-2025-58360, allows attackers to exploit insufficiently sanitized user input to define external entities within XML requests. This flaw has been actively exploited in cyber attacks, affecting users of the GeoServer platform.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

GeoServer Zero-day Exploit