Improper Authentication Vulnerability in ArcGIS Server by Esri

CVE-2026-2812

What is CVE-2026-2812?

ArcGIS Server is impacted by an improper authentication vulnerability stemming from an undocumented administrative endpoint. An unauthenticated attacker could leverage this flaw by sending specially crafted requests to the affected endpoint, potentially disrupting the web-based browsing interface. It is crucial for organizations using ArcGIS Server 12.0 and earlier to review their security measures and apply necessary mitigations to safeguard against potential exploitation.

References