Skip to content

CVE-2026-58400

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
September 2, 2026
Last Seen
September 2, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

GeoNetwork Vulnerabilities Enable Unauthenticated RCE in Government Systems78.0

GeoNetwork, an open-source geospatial metadata catalog, has critical vulnerabilities allowing unauthenticated remote code execution (RCE). Two key CVEs, CVE-2026-63219 and CVE-2026-58400, can be chained to exploit the system. The first flaw allows unauthenticated file uploads to the formatter direct...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitRemote Code ExecutionSql InjectionCVE-2026-63219CVE-2026-55864CWE-287 - Improper AuthenticationCWE-434 - Unrestricted Upload Of File With Dangerous TypeCWE-611 - Improper Restriction Of XML External Entity Reference (xxe)CWE-79 - Cross-site Scripting (xss)CWE-89 - SQL InjectionCWE-918 - Server-Side Request Forgery (ssrf)CWE-94 - Code Injection