CVE-2026-69224 — information disclosure vulnerability in Esri Portal for ArcGIS

CVE-2026-69224

information disclosure vulnerability in Esri Portal for ArcGIS PUBLISHED

Description (CNA)

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body.

Affected (CNA)

Vendor / product	Versions
Esri / Portal for ArcGIS	affected 11.1 through 12.0

CWE

CWE-200

References

https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/august-2026-arcgis-security-bulletin

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.