← Back to home
wid-sec-w-2026-1902  ·  Published 2026-06-11  ·  View on BSI CERT-Bund ↗

GeoServer: Multiple Vulnerabilities

CVSS N/A NONE

Risk Summary

Ein Angreifer kann mehrere Schwachstellen in GeoServer ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

Affected Vendors

Open Source

Affected Products (20)

Open Source · GeoServer gs-web-app <2.27.3
Open Source · GeoServer gs-web-app 2.27.3
Open Source · GeoServer gs-web-app <2.26.4
Open Source · GeoServer gs-web-app 2.26.4
Open Source · GeoServer gs-web-sec-core <2.27.3
Open Source · GeoServer gs-web-sec-core 2.27.3
Open Source · GeoServer gs-web-sec-core <2.26.4
Open Source · GeoServer gs-web-sec-core 2.26.4
Open Source · GeoServer gs-db2 <2.27.0
Open Source · GeoServer gs-db2 2.27.0
Open Source · GeoServer gs-main <2.27.0
Open Source · GeoServer gs-main 2.27.0
Open Source · GeoServer gs-wms <2.27.0
Open Source · GeoServer gs-wms 2.27.0
Open Source · GeoServer gs-webapp <2.27.0
Open Source · GeoServer gs-webapp 2.27.0
Open Source · GeoServer gs-main <2.27.3
Open Source · GeoServer gs-main 2.27.3
Open Source · GeoServer gs-main <2.26.4
Open Source · GeoServer gs-main 2.26.4

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more