Esri
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Portal for ArcGIS | 69 | – | Oct 13, 2026 |
| ArcGIS Server | 64 | – | Oct 26, 2026 |
| ArcGIS Enterprise | 8 | – | Dec 30, 2022 |
| ArcReader | 6 | – | Aug 12, 2022 |
| ArcGIS Pro | 4 | – | Jan 26, 2026 |
| Portal for ArcGIS Enterprise Sites | 4 | – | Aug 21, 2025 |
| ArcGIS Enterprise Web App Builder | 3 | – | Oct 4, 2024 |
| ArcGIS Desktop | 3 | – | Mar 25, 2021 |
| ArcGIS Enterprise Server | 3 | – | Aug 25, 2023 |
| Portal for ArcGIS Sites | 3 | – | Jul 21, 2023 |
| ArcGIS Engine | 3 | – | Mar 25, 2021 |
| ArcGIS Desktop Background Geoprocessing | 3 | – | Mar 25, 2021 |
| ArcGIS Quickcapture | 2 | – | Dec 30, 2022 |
| Portal for ArcGIS Enterprise Experience Builder | 2 | – | Oct 4, 2024 |
| ArcGIS Insights | 2 | – | Jul 19, 2023 |
| ArcGIS Monitor | 1 | – | Feb 26, 2025 |
| ArcGIS Earth | 1 | – | May 5, 2021 |
| ArcGIS Engine Background Geoprocessing | 1 | – | Mar 25, 2021 |
| ArcGIS Enterprise Builder | 1 | – | Apr 4, 2024 |
| ArcGIS GeoEvent Server | 1 | – | May 5, 2021 |
| ArcGIS AllSource | 1 | – | Feb 25, 2025 |
| ArcGIS Web AppBuilder {Developer Edition) | 1 | – | Dec 19, 2025 |
| Enterprise Web App Builder | 1 | – | Oct 4, 2024 |
| Lerc | 1 | – | Sep 25, 2026 |
| Portal for ArcGIS Enterprise Experience Sites | 1 | – | Aug 21, 2025 |
Exploited and recent CVEs
- CVE-2026-50096 BUG-000187164 - ArcGIS Server has a security vulnerability. 0.3%
- CVE-2026-50095 BUG-000187165 - ArcGIS Server has a security vulnerability. 0.3%
- CVE-2026-33522 BUG-000182936 - ArcGIS Server has a security vulnerability. 0.3%
- CVE-2026-33521 BUG-000186514 - ArcGIS Server has a security vulnerability. 0.4%
- CVE-2026-33520 BUG-000185167 - ArcGIS Server has a security vulnerability. 0.3%
- CVE-2026-10757 BUG-000187511 - ArcGIS Server has a security vulnerability. 0.4%
- CVE-2026-69226 Portal for ArcGIS has a security vulnerability 0.2%
- CVE-2026-10759 BUG-000171040 Portal for ArcGIS has a security vulnerability 0.2%
- CVE-2026-69227 BUG-000187331 Portal for ArcGIS has a security vulnerability 0.4%
- CVE-2026-10758 Esri Lerc has a security vulnerability 0.3%
- CVE-2026-69233 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
- CVE-2026-69234 reflected cross site scripting vulnerability in Esri Portal for ArcGIS 0.3%
- CVE-2026-69235 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
- CVE-2026-69236 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
- CVE-2026-69237 HTML injection vulnerability in Esri Portal for ArcGIS 0.3%
- CVE-2026-69232 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
- CVE-2026-69231 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
- CVE-2026-69230 stored cross site scripting issue in Esri Portal for ArcGIS 0.2%
- CVE-2026-69229 HTML injection vulnerability in Esri Portal for ArcGIS 0.3%
- CVE-2026-69228 missing authentication vulnerability in Esri Portal for ArcGIS 0.5%
- CVE-2026-69225 information disclosure vulnerability in Esri Portal for ArcGIS 0.5%
- CVE-2026-69238 HTML injection vulnerability in Esri Portal for ArcGIS 0.2%
- CVE-2026-69224 information disclosure vulnerability in Esri Portal for ArcGIS 0.5%
- CVE-2026-13019 Missing Authentication 0.8%
- CVE-2026-13020 Weak Password Recovery Mechanism in Portal for ArcGIS 0.5%
- CVE-2026-9181 Directory Traversal in ArcGIS Server 1.2%
- CVE-2026-9182 Unvalidated File Upload vulnerability in ArcGIS Server. 0.6%
- CVE-2026-2813 Unvalidated Redirect in ArcGIS Server 0.3%
- CVE-2026-2812 Improper Authentication issue in ArcGIS Server 0.4%
- CVE-2026-33519 Incorrect privilege assignment in Portal for ArcGIS 0.3%