{"id":"CVE-2026-108984","kind":"vulnerability","aliases":["CVE-2026-108984"],"related":[],"title":"GeoWebServer.exe: default web server ports carry an unspecified flaw","description":"A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .","summary":"The NVD entry reports a vulnerability in the default connection ports of the GeoWebServer.exe web server process, scored high at CVSS 7.5. The sources do not say what an attacker can do or what the flaw is.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["geowebserver","other","windows"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-19T02:17:05+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","triaged_at":"2026-10-25T03:23:25+00:00","updated_at":"2026-10-25T03:23:25+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-10-25T03:23:25Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"network","title":"GeoWebServer.exe: default web server ports carry an unspecified flaw","impact":"high","summary":"The NVD entry reports a vulnerability in the default connection ports of the GeoWebServer.exe web server process, scored high at CVSS 7.5. The sources do not say what an attacker can do or what the flaw is.","category":"other","nicknames":[],"who_cares":["windows","geowebserver"],"confidence":0.3,"needs_auth":"unknown","worst_case":"unknown; the sources do not describe the impact","analyst_note":"Find the vendor and affected versions of GeoWebServer.exe and the flaw details at https://nvd.nist.gov/vuln/detail/CVE-2026-108984.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown. The sources name only the GeoWebServer.exe process and its default ports, with no product, version or vendor details.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000516,"input_tokens":3242,"output_tokens":383,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-108984':12A,15A '-2026':11A,14A '7.5':40B 'attack':48B 'carri':6A 'connect':28B,62C 'cve':10A,13A 'cvss':39B 'default':2A,27B,61C 'entri':21B 'flaw':9A,54B 'geowebserv':16B 'geowebserver.exe':1A,32B,68C 'high':37B 'name':67C 'nvd':20B 'port':5A,29B,63C 'process':35B,66C 'report':22B 'say':45B 'score':36B 'server':4A,34B,60C 'sourc':42B 'unspecifi':8A 'vulner':24B,56C 'web':3A,33B,59C 'window':18B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T02:17:05+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"0df08a0e-a200-4957-9bb0-084f562506f9","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108984","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108984","severity":null,"published_at":"2026-10-19T02:17:05+00:00","modified_at":"2026-10-20T19:17:28+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}