CISA Warns of OSGeo GeoServer 0-Day Vulnerability Exploited in Attacks

CISA has added CVE-2025-58360 — an XXE vulnerability in OSGeo GeoServer's /geoserver/wms GetMap handling — to its Known Exploited Vulnerabilities catalog due to active exploitation; federal agencies must remediate under BOD 22-01 by January 1, 2026, and all users are urged to apply vendor fixes or disable affected services to prevent file disclosure, SSRF, or DoS.