GGeoNetwork

Products

Exploited and recent CVEs

• CVE-2026-39379 High 7.1 GeoNetwork: Reflected XSS through client-side template injection 0.4%
• CVE-2026-46487 High 7.5 GeoNetwork: ACL bypass on Elasticsearch search when request body omits query field 0.5%
• CVE-2026-55864 High 7.8 GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool 1.4%
• CVE-2026-63219 High 8.6 Unauthenticated file upload via missing authorization on formatter upload endpoint 0.5%
• CVE-2026-58400 Critical 9.1 GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter 1.2%
• CVE-2026-53573 Medium 4.8 core-geonetwork has an Open Redirect Bypass 0.6%
• CVE-2022-50899 Medium 6.5 Geonetwork 4.2.0 - XML External Entity (XXE) 0.6%
• CVE-2024-32037 None 0.0 GeoNetwork vulnerable to search end-point information disclosure in response headers 0.4%