GeoServer RCE Attack

A critical remote code execution vulnerability (CVE-2024-36401) in GeoServer is being actively exploited and has been observed across 40,000+ FortiGuard sensors; FortiGuard Recon attributes the activity to the Earth Baxia APT group, and CISA has listed the flaw in its Known Exploited Vulnerabilities catalog. The issue stems from inadequate input validation in request handling and poses a significant risk of system compromise.