CVE-2026-69227 — BUG-000187331 Portal for ArcGIS has a security vulnerability

CVE-2026-69227

BUG-000187331 Portal for ArcGIS has a security vulnerability PUBLISHED

Description (CNA)

A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.

Affected (CNA)

Vendor / product	Versions
Esri / Portal for ArcGIS	affected 11.1 through 12.1

CWE

CWE-306

References

https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/september-2026-arcgis-security-bulletin

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.