Unrated severityNVD Advisory· Published Jul 7, 2026· Updated Jul 8, 2026
Missing Authentication
CVE-2026-13019
Description
Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for critical function vulnerability allows a remote, unauthenticated attacker to access an unprotected API.
Affected products
1- Range: <=12.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.