{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/geonode/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:geonode:geonode:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-33050"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["GeoNode (\u003c 5.1.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["GeoNode"],"content_html":"\u003cp\u003eGeoNode is vulnerable to OS command injection (CVE-2026-33050) when processing vector files. An attacker with low-level privileges can provide a crafted layer name within an uploaded vector file that is not properly neutralized, leading to the execution of arbitrary OS commands on the host server. The vulnerability is confirmed in versions prior to 5.1.0.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated attacker with file upload capabilities to execute arbitrary commands on the underlying server, resulting in a full compromise of confidentiality, integrity, and availability.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade GeoNode to version 5.1.0 or later immediately to apply the patch for CVE-2026-33050.\u003c/li\u003e\n\u003cli\u003eAudit logs for unauthorized or unexpected file uploads and shell-execution patterns if GeoNode is exposed.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-06T21:14:33Z","date_published":"2026-11-06T21:14:33Z","id":"https://feed.craftedsignal.io/briefs/2026-11-geonode-rce/","summary":"GeoNode versions prior to 5.1.0 are vulnerable to OS command injection via a malicious layer name in uploaded vector files, allowing authenticated attackers to achieve remote code execution.","title":"GeoNode: OS command injection via file upload (CVE-2026-33050)","url":"https://feed.craftedsignal.io/briefs/2026-11-geonode-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - GeoNode","version":"https://jsonfeed.org/version/1.1"}