Unauthenticated Access Vulnerability in Portal for ArcGIS by Esri

CVE-2026-69227

What is CVE-2026-69227?

A vulnerability found in Portal for ArcGIS allows attackers to gain unauthorized access to specific API endpoints which should require administrative credentials. This flaw can be exploited under certain conditions, granting attackers access to administrative functionalities, posing a serious security risk for installations. It is crucial for users to secure their systems to mitigate potential unauthorized access and ensure proper authentication mechanisms are in place.

References