Exploit for CVE-2026-33050

CVE-2026-33050 - GeoNode OS command injection via uploaded vec...

cortex9-geonode-layer-name-command-injection-model

cortex9-geonode-layer-name-command-injection-model Offline, inert model of CVE-2026-33050 GHSA-9fpx-fr6j-2vh6, CWE-78. GeoNode built an ogr2ogr options string with unquoted alternate / originalname and a naively quoted inputfile, then did options.split" " and Popen..., shell=True 1408290c:L17-19,...