core-geonetwork
- Software type
- Other
- Total vulnerabilities (90 days)
- 5
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, core-geonetwork recorded 5 security vulnerabilities in the last 90 days, of which 5 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of core-geonetwork and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-46487GeoNetwork: ACL bypass on Elasticsearch search when request body omits query fieldCVE-2026-39379GeoNetwork: Reflected XSS through client-side template injectionCVE-2026-55864GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD ToolCVE-2026-63219Unauthenticated file upload via missing authorization on formatter upload endpointCVE-2026-58400GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter7 Results | Page 1 of 1