PT-2026-84456

Name of the Vulnerable Software and Affected Versions GeoNetwork versions prior to 4.2.17 GeoNetwork versions prior to 4.4.12 Description An unauthenticated server-side request forgery SSRF exists where the server performs a server-side HTTP GET request without destination validation. This occurs...

PT-2026-84457

🚨 CVE-2026-57582 - high 🚨 GeoNetwork - Reflected Cross-Site Scripting GeoNetwork versions 4.4.5 through 4.4.11 are vulnerable to reflected cross-site scrip... 👾 https://t.co/d5ACzb8SNg @pdnuclei NucleiTemplates cve...

PT-2026-84458

Name of the Vulnerable Software and Affected Versions GeoNetwork versions prior to 4.4.12 GeoNetwork versions prior to 4.2.17 Description The Saxon XSLT processor used to render formatters is configured without secure processing FEATURE SECURE PROCESSING and without disabling Java extension...