Geo Network Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Two GeoNetwork flaws can be chained for unauthenticated remote code execution: CVE-2026-63219 (CVSS 8.6) is a missing authorization check on the formatter upload endpoint that lets an anonymous user write arbitrary .xsl or .zip files, and CVE-2026-58400...