Security News CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog TheHackerNews Daniel Bender 12 Dec 2025 CISA reports active exploitation of GeoServer XXE flaw CVE-2025-58360 and directs immediate updates to secure affected systems.