Description
A flaw in Portal for ArcGIS allows unauthenticated access to
certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Esri | Portal for ArcGIS | 11.1 – ≤ 12.1 | — |
Advisories 1
- WID-SEC-2026-3601 ESRI ArcGIS: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Oct 13, 2026