CVE-2026-50126 KNMI CVE debrief

Who should care

Defenders managing Adaguc-server installations, especially those exposing the service to untrusted sources, should assess their exposure and prioritize upgrading to version 7.2.2. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify the presence of affected versions, evaluate potential impacts, and implement necessary mitigations.

Why it matters

Defenders should care about CVE-2026-50126 because it can cause Adaguc-server crashes leading to denial of service, requires verification of server versions and exposure to untrusted GeoJSON sources, and may limit data access during an attack. Upgrading to version 7.2.2 can mitigate the issue.

• Potential denial of service through crafted GeoJSON files
• Need for verification of Adaguc-server version and exposure
• Possible data access limitations due to service unavailability

Technical summary

The Adaguc-server is vulnerable to a memory-safety fault when parsing a GeoJSON document with a malformed coordinate. This occurs due to an unchecked pattern in the coordinate parser of `adagucserverEC/CConvertGeoJSON.cpp`, which leads to an out-of-bounds heap read or a NULL pointer dereference. The vulnerability affects versions prior to 7.2.2 and can be triggered through unauthenticated WMS requests.

Defensive priority

Defenders should prioritize verifying exposure of Adaguc-server installations to untrusted GeoJSON sources and upgrading to version 7.2.2 if possible.

Recommended defensive actions

• Verify Adaguc-server installations for exposure to untrusted GeoJSON sources
• Upgrade to version 7.2.2 if possible
• Monitor for crafted GeoJSON files in server logs
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description, CVSS score, and affected versions. GitHub references offer additional context on the patch and advisory. Defenders should verify the GeoJSON parsing vulnerability in Adaguc-server installations, especially those exposed to untrusted sources, and assess potential impacts. Evidence from the CVE and NVD suggests that the vulnerability can cause denial of service and data access limitations. To verify exposure, defenders should check server logs,

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.