CVE-2025-52465

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to pass arbitrary file names to the Master Password Dump web page and create files containing the master password in plaintext. The provided file name must be an absolute path to the target file, the target file can not already exist and all parent directories must already exist. Versions 2.26.4 and 2.27.3 contain a fix. GeoServer installations where the web interface is either disabled or completely removed are not affected since the vulnerability exists in one of the web pages.

• CWE-73

• https://github.com/geoserver/geoserver/pull/8584Issue Tracking, Patch
• https://github.com/geoserver/geoserver/security/advisories/GHSA-7qmg-grcp-qf25Mitigation, Vendor Advisory
• https://osgeo-org.atlassian.net/browse/GEOS-11852Issue Tracking
• https://research.checkpoint.com/2025/cve-2025-24054-ntlm-exploit-in-the-wildNot Applicable

Published

Jun 18, 2026

Last Modified

Jun 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-5246A vulnerability classified as critical was found in Campcode…9.8
• CVE-2025-52460Files or directories accessible to external parties issue ex…6.9
• CVE-2025-52461An out-of-bounds read vulnerability exists in the Nex parsin…9.1
• CVE-2025-52462Cross-site scripting vulnerability exists in Active! mail 6 …6.1
• CVE-2025-52463Cross-site request forgery vulnerability exists in Active! m…3.1
• CVE-2025-52464Meshtastic is an open source mesh networking solution. In ve…8.3
• CVE-2025-52467pgai is a Python library that transforms PostgreSQL into a r…9.1
• CVE-2025-52468Chamilo is a learning management system. Prior to version 1.…6.1
• CVE-2025-52469Chamilo is a learning management system. Prior to version 1.…7.1
• CVE-2025-5247A vulnerability, which was classified as critical, has been …7.3
• CVE-2025-52470Chamilo is a learning management system. Prior to version 1.…4.8
• CVE-2025-52471ESF-IDF is the Espressif Internet of Things (IOT) Developmen…9.8