Product

Portal for ArcGIS 12.1 and Earlier

1 brief RSS

Critical Unauthenticated API Access in Esri Portal for ArcGIS (CVE-2026-13019)

A critical missing authentication vulnerability (CVE-2026-13019) in Esri Portal for ArcGIS versions 12.1 and earlier allows a remote, unauthenticated attacker to access unprotected critical APIs, impacting deployments on Windows, Linux, and Kubernetes environments.

Portal for ArcGIS 12.1 and earlier vulnerability esri arcgis unauthenticated-access api-security rce

1t 1c 1h ago