Geo Server Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE
A zero-day SQL injection flaw in GeoServer's jsonArrayContains function, disclosed August 12, 2026 by researcher @q1uf3ng, drew exploitation attempts within hours, with watchTowr reporting hundreds of attempts from a small pool of IP addresses. The...