CVE-2026-69225: Esri Portal For Arcgis

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body.

Affected products

• Esri Portal For Arcgis: version 11.5 only; version 12.0 only

Published 2026-08-21. Last modified 2026-09-11.