CVE-2026-69224: Esri Portal For Arcgis

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body.

Affected products

• Esri Portal For Arcgis: before 11.1 (fixed in 11.1); version 11.1 only; version 11.2 only; version 11.3 only; version 11.4 only; version 11.5 only; …

Published 2026-08-21. Last modified 2026-09-11.