CVE-2026-63219 | GeoNetwork up to 4.2.16/4.4.11 API Endpoint unrestricted upload

September 3, 2026 Yanac

A vulnerability was found in GeoNetwork up to 4.2.16/4.4.11 and classified as critical. This impacts an unknown function of the component API Endpoint. Such manipulation leads to unrestricted upload.

This vulnerability is listed as CVE-2026-63219. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More