CVE-2026-39379

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, requesting a nonexistent or unauthorized service URL can cause an error page to reflect attacker-controlled request content inside an AngularJS application without adequately neutralizing it for template evaluation. A remote attacker can induce a victim, including an administrator, to open a crafted link so the reflected value is evaluated as an AngularJS template expression. Combined with known AngularJS sandbox-escape techniques, this can execute arbitrary JavaScript in the victim's authenticated browser session, disclose information, or perform actions as the victim. This issue is fixed in versions 4.2.15 and 4.4.10.

• CWE-79
• CWE-1336

• https://github.com/geonetwork/core-geonetwork/commit/5cacdfaa6db88ef6787495b496a0871c0058b7f4
• https://github.com/geonetwork/core-geonetwork/commit/dd99c2ffb642f89b8bf72bafd04d824c9fc0d0ef
• https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.15
• https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.10
• https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-2v4m-fw6c-g78f

Published

Nov 3, 2026

Last Modified

Nov 3, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-39373JWCrypto implements JWK, JWS, and JWE specifications using p…5.3
• CVE-2026-39374Plane is an an open-source project management tool. Prior to…7.7
• CVE-2026-39375Frappe Learning Management System (LMS) is a learning system…5.1
• CVE-2026-39376FastFeedParser is a high performance RSS, Atom and RDF parse…7.5
• CVE-2026-39377The nbconvert tool, jupyter nbconvert, converts Jupyter note…6.5
• CVE-2026-39378The nbconvert tool, jupyter nbconvert, converts Jupyter note…6.5
• CVE-2026-3938Insufficient policy enforcement in Clipboard in Google Chrom…4.3
• CVE-2026-39380Open Source Point of Sale is a web based point-of-sale appli…5.4
• CVE-2026-39381Parse Server is an open source backend that can be deployed …4.3
• CVE-2026-39382dbt enables data analysts and engineers to transform their d…9.3
• CVE-2026-39383Gotenberg is an API-based document conversion tool. In versi…7.2
• CVE-2026-39384FreeScout is a free help desk and shared inbox built with PH…7.6