CVE-2026-39922 — GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side…

/HIGH
CVE Notify vulnerabilitycvecloud
CVE-2026-39922 — GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side…

🚨 CVE-2026-39922 GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability in the service registration endpoint that allows authenticated attackers to trigger outbound network requests to arbitrary URLs by submitting a crafted service URL during.

Release 4.4.5 · GeoNode/geonode
github.com

What This Means For You

  • New vulnerability disclosed — verify if your stack is exposed.

Related ATT&CK Techniques

T1190 Exploit Public-Facing Application Initial Access T1095 Non-Application Layer Protocol Discovery T1571 Non-Standard Port Command and Control

Indicators of Compromise

IDTypeIndicator
CVE-2026-39922 Vulnerability CVE-2026-39922
🔎
Get the full picture on this threat Use /org to search affected organizations, generate IOC briefs with /brief, and set watchlist alerts — inside Telegram.
Try Intel Bot →
Source & Attribution
Source PlatformTelegram
ChannelCVE Notify
Channel ID1129491012
Message ID158853
PublishedApril 10, 2026 at 23:27 UTC
Original Linkhttps://github.com/GeoNode/geonode/releases/tag/4.4.5

This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.

Believe this infringes your rights? Submit a takedown request.