What’s Vulnerable › Products

NCEAS metacat vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your NCEAS metacat version is affected

Latest NCEAS metacat vulnerabilities

• CVE-2026-50022 — Metacat acts as unintended proxy to backend Apache SOLR engine (CVSS 5.8)
• CVE-2026-48528 — Metacat has an unauthenticated SQL injection vulnerability (CVSS 9.8)
• CVE-2026-47754 — unauthenticated path traversal in Metacat 2.x (CVSS 9.3)
• CVE-2026-48114 — Metacat has an unauthenticated SQL injection vulnerability (CVSS 9.8)