CVE-2026-63219

creationtimestamp| type| source ---|---|--- 2026-09-03 12:28:54+00:00| seen| https://vulnerability.circl.lu/bundle/d3a9a3be-7e46-44d6-a018-982d32551a2a 2026-09-03 18:56:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/b3l2gpccocquf 2026-09-04 07:00:01+00:00| exploited|...

VulnCheck KEV: CVE-2026-63219

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files. An unauthenticated attacker can upload arbitrary .x...