Saxon

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 2, 2026
Last mentionedSep 2, 2026

Timeline

1 articles · newest first

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

GeoNetwork patched two chained flaws (CVE-2026-63219, CVE-2026-58400) enabling unauthenticated RCE in government geospatial metadata catalogs.

The Hacker NewsSep 2, 09:18 UTC · Sep 2, 2026VulnerabilityCVE-2026-63219 CVE-2026-58400 CVE-2024-36401+11 · 1 read

Related CVEs

by mentions

CVE-2025-5836061%9.8
Actively Exploited XXE in OSGeo GeoServer WMS GetMap Endpoint
published Nov 25, 2025OSGeo GeoServerKEV
CVE-2024-36401100%9.8
Unauthenticated RCE in OSGeo GeoServer via GeoTools XPath Injection
published Jul 1, 2024OSGeo GeoServerKEVPoC ×3
CVE-2026-584001%9.1
Arbitrary Command Execution via Saxon XSLT in GeoNetwork Formatters
published Sep 3, 2026OSGeo (GeoNetwork project) GeoNetwork opensource (4.4 branch)
CVE-2026-63219<1%8.6
Unauthenticated Arbitrary File Write in GeoNetwork Formatter Upload API
published Sep 3, 2026GeoNetwork (GeoNetwork opensource project) GeoNetwork

Appears with

Ethiackorganization · 1
OSGeovendor · 1
GeoNetworkproduct · 1

Entities are extracted by the model from each article. First seen Sep 2, 2026, last mentioned Sep 2, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.