Product by GeoNetwork

    Core-geonetwork

    5 known vulnerabilities in Core-geonetwork (GeoNetwork), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Core-geonetwork (GeoNetwork)
    HighCVE-2026-55864

    GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool

    also in 1 other product

    		—
    CriticalCVE-2026-58400

    GeoNetwork Core-geonetwork: Code Injection

    		9.1
    HighCVE-2026-63219

    Unauthenticated file upload via missing authorization on formatter upload endpoint

    also in 1 other product

    		8.6
    MediumCVE-2026-53573

    core-geonetwork has an Open Redirect Bypass

    		—
    MediumCVE-2024-32037

    GeoNetwork vulnerable to search end-point information disclosure in response headers

    also in 1 other product

    		—

    All products by GeoNetwork