Back Facebook

‼️ GeoNetwork flaws can enable unauthenticated RCE in government geoportal backends ...

Facebook • September 2, 2026

GeoNetwork flaws can enable unauthenticated RCE in government geoportal backends.

Ethiack found 121 exposed deployments running affected versions across 39 countries; 89% were government, military, or national-agency related. Fixes are in 4.4.12 and 4.2.17.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GeoNetwork Vulnerabilities Enable Unauthenticated RCE in Government Systems GeoNetwork, an open-source geospatial metadata catalog, has critical vulnerabilities allowing unauthenticated remote code execution (RCE). Two key CVEs, CVE-2026-63219 and CVE-2026-58400, can be chained to exploit the system. The first flaw allows unauthenticated file uploads to the formatter directory, while the second flaw involves an unsafe configuration of the Saxon XSLT processor. These vulnerabilities affect numerous government and agency geoportals, with 121 exposed deployments identified across 39 countries. The project released patches in versions 4.4.12 and 4.2.17 on July 8, 2026. Security vendor Ethiack reported that 89% of the exposed instances are related to government, military, or national agencies. Administrators are urged to update to the latest versions to mitigate risks. Until then, blocking write access to the vulnerable endpoint is recommended. 6 sources 78

‼️ GeoNetwork flaws can enable unauthenticated RCE in government geoportal backends ...

The full story

Extracted Entities

Industries (1)

Platforms (1)