CVE-2025-58360

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 28, 2025

Last Seen

September 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

GeoNetwork Vulnerabilities Enable Unauthenticated RCE in Government Systems78.0

GeoNetwork, an open-source geospatial metadata catalog, has critical vulnerabilities allowing unauthenticated remote code execution (RCE). Two key CVEs, CVE-2026-63219 and CVE-2026-58400, can be chained to exploit the system. The first flaw allows unauthenticated file uploads to the formatter direct...

GeoServer XXE Vulnerability Exploited in Cyber Attacks35.5

A recently discovered vulnerability in GeoServer, identified as CVE-2025-58360, allows attackers to exploit insufficiently sanitized user input to define external entities within XML requests. This flaw has been actively exploited in cyber attacks, affecting users of the GeoServer platform.