WID-SEC-W-2026-2886

DeutschShown in its original language — a full translation is planned for a future version.

GeoServer: Schwachstelle ermöglicht SQL-Injection und potenziell Codeausführung

view advisory published 2026-08-17

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GeoServer ausnutzen, um einen SQL-Injection Angriff durchzuführen, und potenziell um beliebigen Programmcode auszuführen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-76904US	—	3.98% (90th)	Exploit	2026-08-21
GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability…

references

External citations — patches, advisories, analysis.

GeoServer 2.27.6 Release vom 2026-08-17external
GeoServer 2.28.5 Release vom 2026-08-17external
GeoServer 3.0.1 Release vom 2026-08-17external
GitHub Security Advisory GHSA-mqjf-5f49-2fjh vom 2026-08-17external
WID-SEC-W-2026-2886 - CSAF Versionself
WID-SEC-2026-2886 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan