Utopia Tech
Security1 min read

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals. The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, and published the vulnerability details on August 31. GeoNetwork originated at the United Nations

UT

Utopia Tech

September 2, 2026 · 1 min read

Share

Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals. The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, and published the vulnerability details on August 31. GeoNetwork originated at the United Nations Food and

Originally published at thehackernews.com

#Cybersecurity#Malware#Vulnerabilities
Share
▸ Want a deeper look?

Talk to an architect about applying this to your stack.

60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.

Schedule the call
▸ Continue reading

More from the journal

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
Security

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

1 min read

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
Security

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands

1 min read

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Security

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

1 min read

All posts
Skip to main content