Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
GeoNetwork, an open-source geospatial metadata catalog, has critical vulnerabilities allowing unauthenticated remote code execution (RCE). Two key CVEs, CVE-2026-63219 and CVE-2026-58400, can be chained to exploit the system. The first flaw allows unauthenticated file uploads to the formatter direct...
A new malware family named SharkLoader has been discovered, linked to a campaign called StrikeShark, which targets various sectors, including a diplomatic organization in Indonesia. SharkLoader acts as a loader to deploy Cobalt Strike Beacon on compromised systems. The campaign exploits vulnerabilit...
A newly disclosed zero-day SQL injection vulnerability in GeoServer is being actively exploited, with researchers observing hundreds of scanning attempts shortly after public disclosure on August 13, 2026. The vulnerability affects the jsonArrayContains function, allowing unauthenticated users to in...
