โ† All reports

The Esri Portal for ArcGIS software has critical vulnerabilities that allow unauthorized access and privilege escalation.

CybersecurityTechnologyConflictInformation SecurityApr 21, 2026score 0.172 posts ยท 0 replies across 1 instances
The thread discusses two critical vulnerabilities in Esri's Portal for ArcGIS software, highlighting issues with authorization and privilege assignment that could lead to security risks. These vulnerabilities are rated high on the CVSS scale and affect multiple versions of the software across different operating systems.

Claims

The Esri Portal for ArcGIS software has critical vulnerabilities that allow unauthorized access and privilege escalation.
Parent: CybersecurityEntity: Esri Portal for ArcGISImpact: negativeDate: Apr 21, 2026Target: The presence and severity of critical vulnerabilities in Esri Portal for ArcGIS

Source posts

@[email protected]
๐Ÿšจ EUVD-2026-24337 ๐Ÿ“Š Score: 9.8/10 (CVSS v3.1) ๐Ÿ“ฆ Product: Portal for ArcGIS ๐Ÿข Vendor: Esri ๐Ÿ“… Updated: 2026-04-21 ๐Ÿ“ An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that may grant more privileges than expected. ๐Ÿ”— https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24337 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts ยท 0 favs ยท 0 replies ยท Apr 21, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
๐Ÿšจ EUVD-2026-24339 ๐Ÿ“Š Score: 9.8/10 (CVSS v3.1) ๐Ÿ“ฆ Product: Portal for ArcGIS, Portal for ArcGIS, Portal for ArcGIS ๐Ÿข Vendor: Esri ๐Ÿ“… Updated: 2026-04-21 ๐Ÿ“ An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kubernetes that did not correctly check permissions assigned to developer credentials. ๐Ÿ”— https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24339 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts ยท 0 favs ยท 0 replies ยท Apr 21, 2026
#cybersecurity#infosec#euvd#cve#vulnerability