OSGeo

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 2, 2026
Last mentionedSep 6, 2026

Timeline

2 articles · newest first

Fwd: [mapserver-announce] security release available: MapServer 8.6.6

The MapServer team released 8.6.6 as an immediate security release fixing six vulnerabilities; administrators running older versions should upgrade.

oss-securitySep 6, 21:04 UTC · Sep 6, 2026Vulnerability1

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

GeoNetwork patched two chained flaws (CVE-2026-63219, CVE-2026-58400) enabling unauthenticated RCE in government geospatial metadata catalogs.

The Hacker NewsSep 2, 09:18 UTC · Sep 2, 2026VulnerabilityCVE-2026-63219 CVE-2026-58400 CVE-2024-36401+11 · 1 read

Related CVEs

by mentions

CVE-2025-5836061%9.8
Actively Exploited XXE in OSGeo GeoServer WMS GetMap Endpoint
published Nov 25, 2025OSGeo GeoServerKEV
CVE-2024-36401100%9.8
Unauthenticated RCE in OSGeo GeoServer via GeoTools XPath Injection
published Jul 1, 2024OSGeo GeoServerKEVPoC ×3
CVE-2026-584001%9.1
Arbitrary Command Execution via Saxon XSLT in GeoNetwork Formatters
published Sep 3, 2026OSGeo (GeoNetwork project) GeoNetwork opensource (4.4 branch)
CVE-2026-63219<1%8.6
Unauthenticated Arbitrary File Write in GeoNetwork Formatter Upload API
published Sep 3, 2026GeoNetwork (GeoNetwork opensource project) GeoNetwork

Appears with

GeoNetworkproduct · 1
OSGeoorganization · 1
MapServervendor · 1
Saxonvendor · 1
MapServerproduct · 1
Ethiackorganization · 1

Entities are extracted by the model from each article. First seen Sep 2, 2026, last mentioned Sep 6, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.