[ Vendor · 4 CVEs ]
Esri
CVEs affecting Esri published in the last 30 days, plus any Esri CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-69226 | 13 Oct 2026 | CVSS 6.5 | Esri Portal for ArcGISA flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when self-service account… | |
| CVE-2026-69227 | 13 Oct 2026 | CVSS 9.8 | Esri Portal for ArcGISA flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable… | |
| CVE-2026-10759 | 13 Oct 2026 | CVSS 5.5 | Esri Portal for ArcGISA flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries… | |
| CVE-2026-10758 | 25 Sep 2026 | CVSS 7.5 | Esri LercEsri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write… |