Skip to content
OpenAdvisories
High WID-SEC-2026-3601 3 CVEs

ESRI ArcGIS: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Sep 27, 2026 · Updated Oct 13, 2026 · Revision 2 · de-DE

Vendor: Esri Product: ArcGIS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in ESRI ArcGIS ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

ArcGIS ist ein Geoinformationssystem.

Vulnerabilities 3

  • Critical 9.8
    CVE-2026-69227

    BUG-000187331 Portal for ArcGIS has a security vulnerability

    A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.

    Esri Portal for ArcGIS
  • Medium 6.5
    CVE-2026-69226

    Portal for ArcGIS has a security vulnerability

    A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when self-service account registration is disabled (disableSignup=true). An attacker can bypass the intended restriction by manipulating the sign…

    Esri Portal for ArcGIS
  • Medium 5.5
    CVE-2026-10759

    BUG-000171040 Portal for ArcGIS has a security vulnerability

    A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without sufficient input neutralization. An authenticated administrator could supply crafted input that modifie…

    Esri Portal for ArcGIS

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-98845, EUVD-2026-98844, EUVD-2026-98842

  2. #1

    Initiale Fassung

References