Skip to content
OpenAdvisories

Vendor

geonetwork

8 known vulnerabilities.

Products

core-geonetwork 7 GeoNetwork 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-63219 Exploited

    Unauthenticated file upload via missing authorization on formatter upload endpoint

    GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files. An unauthenti…

    geonetwork core-geonetwork