CVE-2026-69228 — missing authentication vulnerability in Esri Portal for ArcGIS
There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource…
Published: 2026-08-21 · CVSS: 5.3 · CVSS 3.1
There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource (not user content) that should only be accessible by authenticated users. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, or 12.0 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7