CVE-2026-46487 | GeoNetwork up to 4.0.6-0/4.2.15/4.4.10 Elasticsearch-backed search proxy query privileges management

A vulnerability categorized as problematic has been discovered in GeoNetwork up to 4.0.6-0/4.2.15/4.4.10. This issue affects some unknown processing of the component Elasticsearch-backed search proxy. Executing a manipulation of the argument Query can lead to improper privilege management.

This vulnerability is tracked as CVE-2026-46487. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More