Advisories · Technology

NCEAS metacat.

Every CVE that names NCEAS metacat among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-50022 CVE record

CVSS 5.8 Medium

Metacat acts as unintended proxy to backend Apache SOLR engine
- NCEAS metacat
- CWE-441
Not analysed yet 17 Sept 2026
CVE-2026-48528 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Metacat has an unauthenticated SQL injection vulnerability
- NCEAS metacat
- SQL injection
- Authentication bypass
Not analysed yet 14 Aug 2026
CVE-2026-47754 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

unauthenticated path traversal in Metacat 2.x
- NCEAS metacat
- Path traversal
- Broken access control
Not analysed yet 10 Aug 2026
CVE-2026-48114 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Metacat has an unauthenticated SQL injection vulnerability
- NCEAS metacat
- SQL injection
- Authentication bypass
Not analysed yet 15 Jun 2026