Blog

PHP2Shell and NGINX: what it means for MapStore, GeoServer and GeoNode

PHP2Shell: what it means for MapStore, GeoServer and GeoNode users

On 21 October 2026 the PHP project released fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, now known as PHP2Shell. They allow unauthenticated remote code execution on web servers running PHP. Exploitation attempts were observed even before public disclosure. The UK NCSC has issued an alert asking organisations to find and patch every PHP installation, and to take offline what they cannot fix. Since then we have been receiving questions from organisations running our open source products. Here is the short answer, and what we suggest you check. Are MapStore, GeoServer and GeoNode affected? No since none of them uses...

More
MapStore Release 2026.02

MapStore 2026.02.00 Release

Here is a closer look at the highlights of the new series 2026.02 of MapStore, our flagship Open Source WebGIS product. On GitHub it is possible to consult the full list of new features, enhancements and fixes we have provided in version 2026.02.00. You can try it right away on the MapStore demo. We would like to thank all contributors who made this release possible, in particular Municipality of Genoa, TotalEnergies, Open Groupe, University of Naples, KfW and Deutsche Bahn for their valuable contributions (the full list is available at the v2026.02.00 release page in Github). The 2026.02.00 version introduces a...

More
GeoNode 5.1.0 new release graphic with the GeoNode logo

GeoNode 5.1.0 Release

Dear Reader, Here is a closer look at GeoNode 5.1.0, the first feature release built on top of the renewed 5.0 architecture. The release notes list everything in detail. Where GeoNode 5 was about rebuilding foundations, 5.1.0 is about putting those foundations to work. It significantly broadens the range of data GeoNode can catalogue and publish, and it tightens the controls around how that data is shared. Two themes run through this release. The first is reach: GeoNode now handles data that has no geometry at all, and data that never leaves the remote server it is hosted on. The...

More
GeoSolutions at FOSS4G North America 2026, Sacramento, CA, November 2-4, 2026

GeoSolutions at FOSS4G North America 2026 in Sacramento

Dear Reader, From November 2 to 4, 2026, GeoSolutions will be at FOSS4G North America 2026 in Sacramento, California, at the Sheraton Grand Sacramento. Simone Giannecchini and Andrea Aime will be there for the whole conference, from Monday to Wednesday. You will find them at our table in the exhibit area, where GeoSolutions is present as a Bronze sponsor, and in the session rooms for our four talks. If you want to talk about GeoServer, MapStore or GeoNode, write to sales@geosolutionsgroup.com and we will book a slot. Our talks This year we bring four talks, all in the Technical track...

More
A MapStore dashboard laid out as a printable A4 page in the Print Composer preview

Print Composer for MapStore and GeoNode, built on the GeoServer stack: the crowdfunding campaign is open

Dear Reader, Printing in MapStore and GeoNode still relies on an ageing integration with MapFish Print 2, built around a single map. Dashboards, GeoStories and multi-page documents cannot be printed properly. This year we built a working prototype of a new Print Composer: design the page, preview it live, print it. Maps, dashboards, GeoStories and atlases with one page per feature, rendered by a new open-source print engine built on GeoTools. You can see it in action in the 5-minute demo. Atlas mode: one layout, one page per feature. Watch the full demo on YouTube. Now we want to bring...

More