CVE-2026-39922 | GeoNode up to 4.4.4/5.0.1 WMS Service server-side request forgery

A vulnerability identified as critical has been detected in GeoNode up to 4.4.4/5.0.1. Affected by this vulnerability is an unknown functionality of the component WMS Service. The manipulation leads to server-side request forgery.

This vulnerability is traded as CVE-2026-39922. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.