CISA's list that day
11 December 2025
On CISA added 1 vulnerability to its list of exploited vulnerabilities: CVE-2025-58360 in OSGeo GeoServer. US federal agencies must fix it by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2025-58360Improper Restriction of XML External Entity Reference | OSGeo GeoServer | Patch this weekMetasploit module; EPSS 0.61 | 0.61 |