2026-09-03 (Thursday) Journal

Day summary: Today’s RSS activity: 1 item(s) from vulnerability.circl.lu including “GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends”.

Hourly activity:

hour  00 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23
pulse  .  .  .  .  .  .  .  .  .  .  .  .  .  @  .  .  .  .  .  .  .  .  .  .
count 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

• Source: vulnerability.circl.lu
• Time: 13:28:54
• Summary: # GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends Vulnerability / Web Security Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals. The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, and published the…