PT-2026-138419

CVE-2026-33050

Published

2026-11-06

Updated

2026-11-07

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GeoNode versions prior to 5.1.0

Description GeoNode is a geospatial content management system used for managing and publishing geospatial data. A low-privileged remote user can execute arbitrary operating-system commands on the server by uploading a vector file with a crafted layer name that allows for the injection of shell syntax.

Recommendations Update to version 5.1.0.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

Related identifiers

CVE-2026-33050