Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbound HTTP requests by providing a malicious URL via the doc_url parameter during document upload. Attackers can supply URLs pointing to internal network targets, loopback addresses, RFC1918 addresses, or cloud metadata services to cause the server to make requests to internal resources without SSRF mitigations such as private IP filtering or redirect validation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-39921 GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permis… https://www.cve.org/CVERecord?id=CVE-2026-39921
Post summary
The post identifies CVE‑2026‑39921 as a server‑side request forgery affecting specific GeoNode releases, but does not provide PoC, exploit, or patch details.
CVE-2026-39921 Server-Side Request Forgery in GeoNode 4.0 Before 4.4.5 and 5.0 Before 5.0.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-39921
Post summary
This brief notice announces that GeoNode versions prior to 4.4.5 and 5.0.2 are vulnerable to a Server‑Side Request Forgery identified as CVE‑2026‑39921.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | geosolutionsgroup | geonode | - | - | - |