https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:13:24.361647+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-27511 CVE-2025-27511 — GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection 2026-10-06T04:13:24.406740+00:00

Affected: geoserver org.geoserver.extension:gs-db2

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perform a JNDI attack through specially crafted DB2 jdbc url leading to to Remote Code Execution (RCE). Version 2.27.0 fixes the issue.