THREAT OPS › Threat News › GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE
GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE
A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr.
The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability in the open-source platform that can lead to remote code execution (RCE). The security defect remains unpatched.
It was first disclosed on August 12, 2026, at 10:46 UTC, by a researcher named @