Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-33519

Incorrect privilege assignment in Portal for ArcGIS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Esri

Description

An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kubernetes that did not correctly check permissions assigned to developer credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Esri Portal for ArcGIS

Default version status: unaffected

  • 11.4affected
  • 11.5affected
  • 12.0affected

References