{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ageowebservergeowebserver/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:geowebserver:geowebserver:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-108983"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["GeoWebServer"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eCVE-2026-108983 is a critical vulnerability identified in the GeoWebServer.exe process, which is responsible for web server functionality. The vulnerability is tied to the management of default connection ports, which may expose the service to unauthorized remote access or control. With a CVSS v3.1 base score of 9.8, the vulnerability indicates a high potential for severe impact, likely involving unauthenticated remote code execution or complete system compromise. Organizations utilizing GeoWebServer must immediately review network listener configurations and implement strict access control policies at the perimeter and host level to mitigate the exposure of these default ports until further remediation details are provided by the vendor.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability carries a CVSS score of 9.8, characterizing it as critical. Successful exploitation could allow unauthenticated remote attackers to gain unauthorized access to the underlying host or disrupt services provided by the web server. While specific victim sectors are not provided, any organization running the affected service on publicly accessible network infrastructure is at high risk of compromise if the default configurations remain unmodified.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritized actions for security teams:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all hosts running 'GeoWebServer.exe' across the environment using endpoint inventory or EDR telemetry.\u003c/li\u003e\n\u003cli\u003eReview network connection logs to identify inbound traffic targeting default web server ports used by this process.\u003c/li\u003e\n\u003cli\u003eApply strict ingress firewall rules to restrict access to GeoWebServer ports to known, trusted IP addresses only.\u003c/li\u003e\n\u003cli\u003eMonitor for unauthorized modification of service configuration files or registry keys associated with the GeoWebServer service.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-19T02:57:09Z","date_published":"2026-10-19T02:57:09Z","id":"https://feed.craftedsignal.io/briefs/2026-10-geowebserver-vulnerability/","summary":"CVE-2026-108983 represents a critical vulnerability in GeoWebServer.exe involving default connection port configurations, carrying a CVSS base score of 9.8.","title":"Critical Vulnerability in GeoWebServer.exe Default Connection Ports","url":"https://feed.craftedsignal.io/briefs/2026-10-geowebserver-vulnerability/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:geowebserver:geowebserver:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}