CVE-2026-10759 — BUG-000171040 Portal for ArcGIS has a security vulnerability

CVE-2026-10759

BUG-000171040 Portal for ArcGIS has a security vulnerability PUBLISHED

Description (CNA)

A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without sufficient input neutralization. An authenticated administrator could supply crafted input that modifies the intended LDAP query and causes unintended directory operations.

Affected (CNA)

Vendor / product	Versions
Esri / Portal for ArcGIS	affected 0 through 12.2

CWE

CWE-90

References

https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/september-2026-arcgis-security-bulletin

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.