WID-SEC-W-2026-1902

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

GeoServer: Mehrere Schwachstellen

view advisory published 2026-06-11

Ein Angreifer kann mehrere Schwachstellen in GeoServer ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-58175UShigh8.2—
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` may…
CVE-2025-52465US——
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a vulnerability exists that allows an authenticated adm…
CVE-2025-27511US——
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perfo…
CVE-2024-45747US——
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan