https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving OSGeo.Sun, 26 Jul 2026 22:32:52 GMThttps://isc.sans.edu/diary/rss/33176cst-3040Geoserver instances are being targeted with CVE-2024-36401, an X-Path expression evaluation flaw, to deploy the Rondo botnet. The exploit chain attempts to download and execute a shell script from a remote server, though evidence suggests the malware may have been subsequently removed from affected hosts. This represents a continuation of Rondo's documented interest in Geoserver as an attack vector.Wed, 22 Jul 2026 17:35:33 GMT