GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Medium Severity
Global
Date OccurredSep 02, 202609:18 UTC
Event TypeCyber Intelligence
SourceTheHackerNews
RecordedSep 02, 2026
Full Description
Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geo