Skip to content
Threat Feed
Subscribe

Tag

Arcgis

4 briefs RSS
high advisory

Multiple Vulnerabilities in ESRI ArcGIS Allow Privilege Escalation and Security Bypass

Multiple unpatched vulnerabilities in ESRI ArcGIS allow a remote, anonymous attacker to bypass security measures or gain elevated user rights, potentially leading to unauthorized access and privilege escalation within affected systems.

ArcGIS vulnerability esri privilege-escalation defense-evasion
3t
critical advisory

Critical Unauthenticated API Access in Esri Portal for ArcGIS (CVE-2026-13019)

A critical missing authentication vulnerability (CVE-2026-13019) in Esri Portal for ArcGIS versions 12.1 and earlier allows a remote, unauthenticated attacker to access unprotected critical APIs, impacting deployments on Windows, Linux, and Kubernetes environments.

Portal for ArcGIS 12.1 and earlier vulnerability esri arcgis unauthenticated-access api-security rce
1t 1c
critical advisory

Esri Portal for ArcGIS Incorrect Authorization Vulnerability (CVE-2026-33519)

CVE-2026-33519 is a critical vulnerability in Esri Portal for ArcGIS 11.4, 11.5, and 12.0, where incorrect authorization checks on developer credentials can lead to unauthorized privilege escalation on Windows, Linux, and Kubernetes deployments.

esri arcgis privilege-escalation incorrect-authorization cve-2026-33519 webserver
2r 1t 1c
high advisory

Esri Portal for ArcGIS Privilege Escalation via CVE-2026-33518

Esri Portal for ArcGIS 11.5 on Windows and Linux is vulnerable to privilege escalation (CVE-2026-33518), allowing highly privileged users to create developer credentials with excessive permissions.

Portal for ArcGIS esri arcgis privilege-escalation CVE-2026-33518 vulnerability
2r 1t 1c