PT-2026-84458

GeoNetwork pre-auth RCE chain: missing auth on formatter upload + unsafe Saxon XSLT. CVE-2026-63219 8.6: formatter upload dropped Spring PreAuthorize after the 4.0.6 refactor → unauthenticated write of .xsl/.zip. CVE-2026-58400 9.1: Saxon still allows Java extension functions → loaded stylesheet...