GeoServer

Platform

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 28, 2025

Last Seen

September 2, 2026

API

GeoServer is an open-source geospatial server platform that enables sharing and editing of geospatial data, typically serving via standards like WMS and WFS and running on Java.

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (7)

1 / 2

Related Entities

Mexican Mafia MexicanMafia PanchoVilla Sql Injection Zero-day Exploit Malware Data Breach Phishing StrikeShark Operation Escaneo Cisco Education

GeoServer

Overview

Recent Events

Profile

Malware

CVEs

Threat Actors

Tools

Attack Types

Regions

Sectors

Relationships

Related Clusters (7)

Operation Escaneo Targets Latin American Critical Infrastructure

GeoNetwork Vulnerabilities Enable Unauthenticated RCE in Government Systems

StrikeShark Campaign Unleashes SharkLoader Malware to Deploy Cobalt Strike

Active Exploitation of GeoServer Zero-Day SQL Injection Vulnerability

EU Cybersecurity Standards Published Amid Ongoing Breaches

CISA Identifies Exploited Vulnerabilities in DigiEver and GeoServer

GeoServer XXE Vulnerability Exploited in Cyber Attacks

Related Articles (13)

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Risky Bulletin: The EU publishes its upcoming cybersecurity standards

GeoServer Zero

GeoServer 0

Early exploitation attempts observed of GeoServer zero day

Attackers target zero

StrikeShark Campaign Uses New SharkLoader Malware to Deploy Cobalt Strike Beacon

StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader

Operation Escaneo: Infrastructure Exposure, TTP Analysis, and Attribution Assessment of an ...

Recent GeoServer Vulnerability Exploited in Attacks

Recent GeoServer Vulnerability Exploited in Attacks

CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog

CVE-2025-58360: GeoServer XXE Vulnerability Analysis

Related Entities