What’s Vulnerable › Products

geonetwork core-geonetwork vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your geonetwork core-geonetwork version is affected

Latest geonetwork core-geonetwork vulnerabilities

• CVE-2026-55864 — GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool (CVSS 7.8)
• CVE-2026-63219 — Unauthenticated file upload via missing authorization on formatter upload endpoint (CVSS 8.6)
• CVE-2026-58400 — GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter (CVSS 9.1)
• CVE-2026-53573 — core-geonetwork has an Open Redirect Bypass (CVSS 4.8)
• CVE-2022-50899 — Geonetwork 4.2.0 - XML External Entity (XXE) (CVSS 6.5)
• CVE-2025-30220 — GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling (CVSS 9.1)
• CVE-2024-32037 — GeoNetwork vulnerable to search end-point information disclosure in response headers (CVSS 5.3)
• CVE-2021-28398 — (CVSS 7.2)