CVE-2026-63219: core-geonetwork, actief misbruikt

GeoNetwork is a catalog application to manage spatially referenced resources.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files.zip` formatter files to the server. An unauthenticated attacker can write arbitrary files into the GeoNetwork formatter directory. On its own this constitutes unauthorized write access to server storage.17.