GeoServer

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenAug 15, 2026
Last mentionedAug 17, 2026

Timeline

4 articles · newest first

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Weekly recap: suspected China-nexus APT exploited VMware vCenter CVE-2026-59310, Lazarus used Windows zero-day CVE-2026-68820, and macOS flaw dropped Monero miners.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2026-59310 CVE-2026-65400 CVE-2026-688203

GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

A CVSS 9.8 SQL injection zero-day in GeoServer's PostGIS datastore enables RCE and drew active exploitation; fixes shipped in versions 3.0.1, 2.28.5, 2.27.6.

The Hacker NewsAug 17, 17:05 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2024-36401 CVE-2023-25158 CVE-2023-251576 · 4 reads

Fake CVE-2023

A fake PoC for WinRAR RCE CVE-2023-40477 posted on GitHub actually deploys VenomRAT through a multi-step infection chain targeting researchers.

Palo Alto Unit 42Aug 17, 10:57 UTC · Aug 17, 2026MalwareCVE-2023-40477 CVE-2023-251574 · 1 read

GeoServer Zero-Day Is Already Being Probed. That’s the Problem

Unpatched GeoServer zero-day enabling SQL injection and possible RCE is being actively probed across exposed systems.

Security AffairsAug 15, 07:18 UTC · Aug 15, 2026Exploit / PoCExploitedCVE-2024-364018 · 2 reads

Related CVEs

by mentions

CVE-2024-36401100%9.8
Unauthenticated RCE in OSGeo GeoServer via GeoTools XPath Injection
published Jul 1, 2024OSGeo GeoServerKEVPoC ×3
CVE-2023-2515785%9.8
GeoServer: GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web…
published Feb 21, 2023osgeo geoserver
CVE-2026-654002%9.8
Authentication Bypass in Apple macOS Screen Sharing
published Aug 6, 2026Apple macOS (Screen Sharing service)KEV
CVE-2026-593103%9.8
Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
published Jul 30, 2026Broadcom (VMware) vCenter ServerKEVRansomwarePoC ×2
CVE-2026-68820<1%7.0
Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
published Aug 11, 2026Microsoft Windows Ancillary Function Driver for WinSock (afd.sys)KEV
CVE-2023-251581%9.8
GeoTools: GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL…
published Feb 21, 2023geotools geotools
CVE-2023-4047711%7.8
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
published May 3, 2024rarlab winrar

Appears with

GeoServerproduct · 3
watchTowrorganization · 3
Broadcom/Symantecorganization · 1
WildFireproduct · 1
Palo Alto Networksorganization · 1
Lazarus Groupthreat actor · 1
Jamfvendor · 1
Screen Sharingproduct · 1
GeoCatorganization · 1
CISAorganization · 1
ForestTigermalware · 1
VenomRATmalware · 1
whalersplonkthreat actor · 1
Amnesia Stealermalware · 1
VirusTotalproduct · 1
vCenterproduct · 1

Entities are extracted by the model from each article. First seen Aug 15, 2026, last mentioned Aug 17, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.