GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
The Hacker News
Why it matters
This page references a cybersecurity signal published by The Hacker News. It helps CISOs, DPOs, IT leaders, infrastructure teams, SMBs and enterprise accounts track vulnerabilities, alerts and trends that may affect security, compliance or system resilience.
Unix Consulting read
This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the existence of a vulnerability, but how quickly the organization can verify whether it is affected.
Watch points
Presence of the product or component in the environment
External exposure or administrator access
Patch, workaround and maintenance window
Recommended action
Check exposure against the inventory, qualify whether the component is present, then decide quickly between patching, workaround or reinforced monitoring.
Relevant for
CISOs, IT leaders, infrastructure teams, operations and application owners.
Source summary
Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals. The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, and published the vulnerability details on August 31. GeoNetwork originated...