Skip to content
OpenAdvisories

Vendor

NCEAS

4 known vulnerabilities.

Products

metacat 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-48528

    Metacat has an unauthenticated SQL injection vulnerability

    Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 through 3.4.0 contain an unauthenticated SQL injection vulnerability in the `/cn/v1/object` and `/cn/v2/object` REST API endpoints due to uns…

    NCEAS metacat
  • Critical 9.3
    CVE-2026-47754

    unauthenticated path traversal in Metacat 2.x

    Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.x through 2.19.1 and all 1.x versions contain an unauthenticated path traversal in the `archiveEntryName` parameter of the `action=read` endpoint that is…

    NCEAS metacat
  • Critical 9.8
    CVE-2026-48114

    Metacat has an unauthenticated SQL injection vulnerability

    Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.0.0 and and above contain an unauthenticated SQL injection in the /harvesterRegistration endpoint. HarvesterRegistration.dbInsert() builds an INSERT agai…

    NCEAS metacat