60
60
60
December 2025 CVE Landscape: 22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat Activity
60
60
Fwd: [mapserver-announce] security release available: MapServer 8.6.6
The MapServer team released 8.6.6 as an immediate security release fixing six vulnerabilities; administrators running older versions should upgrade.
The MapServer project announced the immediate availability of MapServer 8.6.6, a security release containing fixes for six vulnerabilities. The announcement via the mapserver-announce list did not include CVE identifiers or per-flaw details. MapServer is an open-source web mapping platform, and administrators of deployments on 8.6.5 or earlier are advised to upgrade.
38
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
GeoNetwork patched two chained flaws (CVE-2026-63219, CVE-2026-58400) enabling unauthenticated RCE in government geospatial metadata catalogs.
Two flaws in the open-source GeoNetwork catalog chain into unauthenticated RCE: a missing authorization check on the formatter upload endpoint (CVE-2026-63219, CVSS 8.6) and an unsafe Saxon XSLT processor configuration allowing Java execution (CVE-2026-58400, CVSS 9.1). Fixes shipped in versions 4.4.12 and 4.2.17 on July 8, 2026, with details published August 31. Ethiack fingerprinted 121 internet-exposed vulnerable deployments across 39 countries, 89% tied to government or military agencies. No exploitation in the wild or KEV listing was reported at disclosure.
50
60
57
60
CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises
60
47
60
60
60
60