Vendor
GeoNetwork
7 known vulnerabilities in products by GeoNetwork, 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-55864 | GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool | — | |
| Critical | CVE-2026-58400 | GeoNetwork Core-geonetwork: Code Injection | 9.1 | |
| High | CVE-2026-63219 | Unauthenticated file upload via missing authorization on formatter upload endpoint | 8.6 | |
| High | CVE-2022-50899 | Geonetwork 4.2.0 - XML External Entity (XXE) | 6.5 | |
| Medium | CVE-2026-53573 | core-geonetwork has an Open Redirect Bypass | — | |
| Not rated | CVE-2006-5513 | GeoNetwork Opensource: SQL Injection | — | |
| Medium | CVE-2024-32037 | GeoNetwork vulnerable to search end-point information disclosure in response headers | — |
Products
| Core-geonetwork | 5 | 0 |