Public-sector attack surface

A dropped authorization check exposes GeoNetwork geoportal backends to unauthenticated RCE

GeoNetwork's fix shipped 54 days before anyone explained what it fixed. Ethiack puts 121 exposed vulnerable catalogs across 39 countries, nearly nine in ten of them government, military or national-agency systems.