What’s Vulnerable › Vulnerabilities
CVE-2026-69227: BUG-000187331 Portal for ArcGIS has a security vulnerability
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-13 · updated 2026-10-16
- Weakness: CWE-306
Description
A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.
Affected products
- Esri Portal for ArcGIS: from 11.1 through 12.1
References
Get alerted when CVE-2026-69227 or the next vulnerability affects your stack