CVE-2026-69227

critical · 9.8

A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.

9.8

CVSS

0.3%

EPSS (exploit prob.)

25th

EPSS percentile

2026-10-13

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-306

References

https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/september-2026-arcgis-security-bulletin

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-69227