4 matches found
CVE-2026-46487
GeoNetwork (versions 4.0.0-alpha.1 through 4.4.10 ) is vulnerable to an Access Control List (ACL) bypass (CWE-862) in its Elasticsearch-backed search API. The vulnerability occurs because the search proxy layer fails to inject required access-control and visibility filters when a client request o...
PT-2026-55099
Summary GeoNetwork's Elasticsearch-backed search API is responsible for injecting access-control and visibility filters into every request before it reaches the underlying Elasticsearch index. Under certain request conditions, that filtering step does not run, allowing an unauthenticated user to...
CVE-2026-46372 SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, SillyTavern exposes /api/search/searxng, which accepts attacker-controlled baseUrl and uses it...