> CISA orders feds to patch actively exploited Geoserver flaw
[AUTHOR: Sergiu Gatlan]
[DATE: 12/12/2025 09:48]
[LANGUAGE: EN]
CISA has ordered U.S. federal agencies to patch a critical GeoServer vulnerability now actively exploited in XML External Entity (XXE) injection attacks. [...]