Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-01 | 2 | Disclosure2 |
| 2026-09-02 | 1 | General1 |
| 2026-10-01 | 1 | Disclosure1 |
New unauth RCE in GeoNetwork Popped and reported by @castilho101 💥 CVE-2026-63219, CVE-2026-55864, CVE-2026-57582, CVE-2026-58400 https://t.co/aXkS1L27vw
Post summary
A new unauthenticated remote code execution vulnerability has been identified in GeoNetwork, with four CVE identifiers listed, but the tweet offers only basic details without any PoC, exploit code, or patch information.
@castilho101 breaks down the discovery and exploitation of a Pre-Auth Remote Code Execution flaw in GeoNetwork. We recently disclosed 4 CVEs on it: CVE-2026-63219 - Unauthenticated file upload via missing Authorization on formatter Upload Endpoint CVE-2026-55864 - Unauthenticated Server-Side Request Forgery in SLD Tool CVE-2026-57582 - Reflected XSS via unsanitized Javascript Sink CVE-2026-58400 - Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter Full writeup 👇
Post summary
This post discloses four CVEs affecting GeoNetwork with specific technical descriptions of each flaw, linking to a full writeup on discovery and exploitation, but provides no remediation details, named exploit tools, or evidence of active in-the-wild exploitation.
🚨 CVE-2026-57582 - high 🚨 GeoNetwork - Reflected Cross-Site Scripting > GeoNetwork versions 4.4.5 through 4.4.11 are vulnerable to reflected cross-site scrip... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-57582 @pdnuclei #NucleiTemplates #cve
Post summary
The tweet announces CVE-2026-57582 as a high‑severity reflected XSS vulnerability affecting GeoNetwork 4.4.5‑4.4.11, linking to a Project Discovery library but providing no PoC, exploit, patch, or evidence of active exploitation.
What happens when a single missing annotation leaves critical GeoNetwork infrastructure exposed across 39 countries? CVE-2026-63219. CVE-2026-55864. CVE-2026-57582. CVE-2026-58400. 89% of affected GeoNetwork deployments belong to government, military, or national agencies. Every single one was notified and patched before public disclosure. Read the full research⬇️ https://ethiack.com/info-hub/research/geonetwork-preauth-RCE
Post summary
The post announces four new CVEs impacting GeoNetwork deployments globally, notes widespread exposure, and confirms that all affected organizations were notified and patched before the vulnerability became publicly known.