Cyber Intelligence

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Medium Severity Global
Date Occurred Sep 02, 2026 09:18 UTC
Event Type Cyber Intelligence
Source TheHackerNews
Recorded Sep 02, 2026
Full Description

Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geo

Event Metadata
  • ID #28437
  • Type Cyber Intelligence
  • Region Global
  • Severity Medium
  • Indexed Sep 02, 2026