Critical severity9.8NVD Advisory· Published Oct 13, 2026

CVE-2026-69227

Description

A flaw in Portal for ArcGIS allows unauthenticated access to certain /portaladmin/local API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.

Affected products

ArcGIS/Portal for ArcGISllm-fuzzy

Patches

Vulnerability mechanics

References

www.esri.com/arcgis-blog/products/trust-arcgis/administration/september-2026-arcgis-security-bulletinnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000