GeoServer is an open-source server for sharing geospatial data. A newly disclosed zero-day SQL injection vulnerability is being actively exploited, potentially leading to remote code execution. No patch is currently available, and organizations are advised to restrict public access.