GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals.

The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, and published the vulnerability details on August 31.

GeoNetwork originated at the United Nations Food and

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Attack Update: Top 5 Attack-IPs auf doode.info – 29.06.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 460 requests (recent log) 213.209.159.175 — 263 requests (recent log) 216.73.216.208 — 135 requests (recent

Ask HN: Does anyone let AI agents play games just for fun?

Ask HN: Does anyone let AI agents play games just for fun? Source: Hacker News

Attack Update: Top 5 Attack-IPs auf doode.info – 29.06.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 210 requests (recent log) 216.73.216.208 — 62 requests (recent log) 216.244.66.232 — 47 requests (recent