CVE-2024-36401 (CVSS 9.8): Critical GeoServer Flaw Under Active Attack, PoC Available Vulnerability CVE-2024-36401 (CVSS 9.8): Critical GeoServer Flaw Under Active Attack, PoC Available Do Son July 15, 2024 0 Adding to the urgency, the proof-of-concept (PoC) exploit code for CVE-2024-36401 has already been published online.