CVE-2026-108983CWE-78command-injection

CVE-2026-108983

Critical · published October 19, 2026

CVSS v3.1

9.8

EPSS

Percentile

23.0

In the wild

Unconfirmed

What it is

A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .

The record

Technical detail

CVSS v3.1: 9.8 · CRITICAL
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00314 · 23.0th percentile
Weakness: CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published: 2026-10-19T06:17Z

References (1)

EPSS history

Timeline