VulnSocial

CVE-2026-55864Disclosure

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

Back to dashboard
0.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-09-01); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-01: 2Mentions · 2026-10-01: 1Patch / Workaround · 2026-09-01: 1Technical Details · 2026-09-01: 2Technical Details · 2026-10-01: 109-0110-01
Signal classification1 categories
Disclosure
3100.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-09-012
Disclosure2
2026-10-011
Disclosure1
Full discourse3 posts
  • André Baptista@0xacb
    Disclosure

    New unauth RCE in GeoNetwork Popped and reported by @castilho101 💥 CVE-2026-63219, CVE-2026-55864, CVE-2026-57582, CVE-2026-58400 https://t.co/aXkS1L27vw

    Post summary

    A tweet reports new unauthenticated RCE vulnerabilities (CVE-2026-63219, CVE-2026-55864, CVE-2026-57582, CVE-2026-58400) in GeoNetwork, but provides no proof of concept, exploit code, or patch details.

    1160108459.8K
    20.2K followersView on X
  • André Baptista@0xacb
    Disclosure

    @castilho101 breaks down the discovery and exploitation of a Pre-Auth Remote Code Execution flaw in GeoNetwork. We recently disclosed 4 CVEs on it: CVE-2026-63219 - Unauthenticated file upload via missing Authorization on formatter Upload Endpoint CVE-2026-55864 - Unauthenticated Server-Side Request Forgery in SLD Tool CVE-2026-57582 - Reflected XSS via unsanitized Javascript Sink CVE-2026-58400 - Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter Full writeup 👇

    Post summary

    The tweet announces the disclosure of four CVEs in GeoNetwork, providing specific technical details for each vulnerability (file upload, SSRF, XSS, RCE) and linking to a full writeup, without mentioning patches, active exploitation, or exploit tools.

    23054931
    20.2K followersView on X
  • Ethiack@ethiack
    Disclosure

    What happens when a single missing annotation leaves critical GeoNetwork infrastructure exposed across 39 countries? CVE-2026-63219. CVE-2026-55864. CVE-2026-57582. CVE-2026-58400. 89% of affected GeoNetwork deployments belong to government, military, or national agencies. Every single one was notified and patched before public disclosure. Read the full research⬇️ https://ethiack.com/info-hub/research/geonetwork-preauth-RCE

    Post summary

    The post announces four pre‑authentication Remote Code Execution vulnerabilities affecting GeoNetwork in 39 countries, noting that affected sites were notified and patched before the public release of the research.

    01010197
    2.1K followersView on X

Explore more

Back to dashboard