Skip to content
OpenAdvisories
High WID-SEC-2026-1710 2 CVEs

ESRI ArcGIS: Mehrere Schwachstellen

Published May 27, 2026 · Updated Jul 6, 2026 · Revision 2 · de-DE

Vendor: Esri Product: ArcGIS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in ESRI ArcGIS ausnutzen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.

Product

ArcGIS ist ein Geoinformationssystem.

Vulnerabilities 2

  • Critical 9.8
    CVE-2026-9181

    Directory Traversal in ArcGIS Server

    Esri ArcGIS Server contains a directory traversal vulnerability. ArcGIS Enterprise on Kubernetes is not impacted. An unauthenticated attacker could exploit this issue by sending crafted path parameters. Successful exploitation could allow overwriting sensitiv…

    Esri ArcGIS Server
  • Critical 9.8
    CVE-2026-9182

    Unvalidated File Upload vulnerability in ArcGIS Server.

    Esri ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue by uploading a crafted file to the affected endpoint. Successful exploitation could allow arbitrary file upload, potentially allowing f…

    Esri ArcGIS Server

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-41897, EUVD-2026-41896

  2. #1

    Initiale Fassung

References