Affected Systems

GeoNetwork open-source catalog application. Specific affected versions not disclosed in advisory. All unpatched instances potentially vulnerable to remote code execution.

Exploitation Status

Active exploitation status unknown. CERT.BE issued urgent patching advisory indicating high threat level. No CVE assigned yet, suggesting recently disclosed vulnerability.

Business Impact

Remote code execution allows attackers full system compromise on GeoNetwork servers. Organizations using GeoNetwork for geospatial metadata management face risk of data breach, service disruption, and lateral movement. Particularly impacts government agencies, research institutions, and organizations managing geographic data catalogs. Severity rated critical by national CERT.

Urgency

🔴 Immediate

Recommended Actions

  • Identify all GeoNetwork instances in your environment and verify current versions
  • Apply latest security patches from GeoNetwork project immediately
  • Restrict network access to GeoNetwork instances using firewall rules until patched
  • Monitor GeoNetwork server logs for suspicious activity or unexpected code execution attempts
  • Review GeoNetwork access logs from past 30 days for indicators of compromise