Input Validation Weakness in ArcGIS Server by Esri

CVE-2026-2813

What is CVE-2026-2813?

Esri's ArcGIS Server experiences an input validation flaw within its login redirection process. This vulnerability allows authenticated attackers to exploit the system by crafting specific requests, which could redirect users to unauthorized and potentially harmful sites. Although this primarily risks user confidentiality under certain conditions, the issue is limited to the client-side authentication workflow and does not compromise server integrity or affect other system components. Currently, the issue affects versions 11.5 of ArcGIS Server.

References