CVE-2026-69227
BUG-000187331 Portal for ArcGIS has a security vulnerability
- State
- Published
- Severity
- 9.8 Critical
- Published
- Oct 13, 2026
- Updated
- Oct 14, 2026
- Reserved
- Aug 3, 2026
Description
A flaw in Portal for ArcGIS allows unauthenticated access to
certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | Esri |
Weaknesses
- CWE-306 Missing Authentication for Critical Function
Affected Products
| Product | Versions |
|---|---|
Portal for ArcGISEsri |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.