Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

CVE-2025-27511 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2025-27511

CVE-2025-27511

HIGH7.2

GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection

Published Jun 18, 2026

Modified 5 days ago

Details

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perform a JNDI attack through specially crafted DB2 jdbc url leading to to Remote Code Execution (RCE). Version 2.27.0 fixes the issue.

References

https://github.com/geoserver/geoserver/releases/tag/2.27.0

https://github.com/geoserver/geoserver/security/advisories/GHSA-g628-r368-6vh7

https://nvd.nist.gov/vuln/detail/cve-2023-27867

https://osgeo-org.atlassian.net/browse/GEOT-7725

https://www.cve.org/CVERecord?id=CVE-2025-27511

CVSS Analysis

CVSS v3.1

7.2

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

HighPR:H

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

Input Validation

Serialization

Deserialization of Untrusted Data

Ecosystems

Timeline

PublishedJun 18, 2026

ModifiedJun 18, 2026