Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

RULE（RULE ID：346416）

Rule General Information


Release Date:		2026-10-12

Rule Name:		GeoServer jsonArrayContains SQL Injection Vulnerability (CVE-2026-76904)

Severity:

CVE ID:

Rule Protection Details


Description:		GeoTools is an open-source geospatial data processing framework from the GeoTools organization. GeoTools versions from 30.5 up to but not including 33.6, from 34.0 up to but not including 34.5, and version 35.0 contain a SQL injection vulnerability. This vulnerability arises from the jsonArrayContains function failing to escape the value parameter when executing OGC Filters using the PostGIS DataStore, resulting in SQL injection.

Impact:		An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.

Affected OS:		Windows, Linux, Others

Reference:		https://github.com/geotools/geotools/pull/5829 https://osgeo-org.atlassian.net/browse/GEOT-7589 https://github.com/geotools/geotools/releases/tag/34.5 https://osgeo-org.atlassian.net/browse/GEOT-7959 https://github.com/geotools/geotools/releases/tag/35.1 https://github.com/geotools/geotools/commit/d821c4d321dd91c22e31fcd5b1ce676645da5176 https://osgeo-org.atlassian.net/browse/GEOT-7958 https://github.com/geotools/geotools/releases/tag/33.6 https://github.com/geotools/geotools/security/advisories/GHSA-mqjf-5f49-2fjh

Solutions

Please refer to announcements or patches release by the vendor: https://github.com/geotools/geotools/security/advisories/GHSA-mqjf-5f49-2fjh