{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aesriarcgis_server/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:esri:arcgis_server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-33521"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ArcGIS Server (\u003c= 12.0)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Esri"],"content_html":"\u003cp\u003eA denial of service vulnerability exists in Esri ArcGIS Server versions 12.0 and prior. A remote, unauthenticated attacker may supply crafted requests that, under exceptional circumstances, consume all available worker threads and deny service to users.\u003c/p\u003e\n\u003cp\u003ePatches are provided for software in General Availability and Extended support status, including versions 11.1, 11.3, 11.5, and 12.0. Versions in mature or retired status are not patch eligible; users are advised to upgrade.\u003c/p\u003e\n","date_modified":"2026-10-26T19:44:23Z","date_published":"2026-10-26T19:44:23Z","id":"https://feed.craftedsignal.io/briefs/2026-10-arcgis-server-dos/","summary":"Esri ArcGIS Server versions 12.0 and prior contain a denial of service vulnerability that may allow a remote, unauthenticated attacker to exhaust worker threads.","title":"Esri ArcGIS Server: Denial of Service (CVE-2026-33521)","url":"https://feed.craftedsignal.io/briefs/2026-10-arcgis-server-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:esri:arcgis_server:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}