Detections
Analytics
CVE-2025-58360
critical
Description
GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. However, this input is not sufficiently sanitized or restricted, allowing an attacker to define external entities within the XML request. This issue has been patched in GeoServer 2.25.6, GeoServer 2.26.3, and GeoServer 2.27.0.
References
https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html
https://thehackernews.com/2025/12/cisa-flags-actively-exploited-geoserver.html
https://github.com/thomas-osgood/cve-2025-58360
https://github.com/Retro023/MY-CVE-POC-s
https://github.com/quyenheu/Bypass-CVE-2025-58360
https://github.com/OhMyCrab/cve
https://github.com/Joker-Wiggin/CVE-2025-58360-GeoServer-XXE
https://github.com/rxerium/CVE-2025-58360
https://github.com/SilenceIsNotAlwaysGold/Accumulation-of-personal-vulnerability-data
https://github.com/quyenheu/CVE-2025-58360
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-58360