Privilege Escalation in Esri Portal for ArcGIS by Esri

CVE-2026-33518

What is CVE-2026-33518?

An incorrect privilege assignment vulnerability in Esri Portal for ArcGIS 11.5, available on both Windows and Linux platforms, allows users with high privileges to create developer credentials. This capability may lead to unintended privilege grants, potentially compromising the integrity and security of the system. Users could inadvertently gain access to permissions beyond what was intended, making it critical for organizations to assess and mitigate their user privilege management practices.

References