Esri

Products

ProductCVEsExploitedLatest
Portal for ArcGIS69–Oct 13, 2026
ArcGIS Server64–Oct 26, 2026
ArcGIS Enterprise8–Dec 30, 2022
ArcReader6–Aug 12, 2022
Portal for ArcGIS Enterprise Sites4–Aug 21, 2025
ArcGIS Pro4–Jan 26, 2026
Portal for ArcGIS Sites3–Jul 21, 2023
ArcGIS Desktop Background Geoprocessing3–Mar 25, 2021
ArcGIS Desktop3–Mar 25, 2021
ArcGIS Enterprise Server3–Aug 25, 2023
ArcGIS Enterprise Web App Builder3–Oct 4, 2024
ArcGIS Engine3–Mar 25, 2021
ArcGIS Insights2–Jul 19, 2023
ArcGIS Quickcapture2–Dec 30, 2022
Portal for ArcGIS Enterprise Experience Builder2–Oct 4, 2024
ArcGIS Enterprise Builder1–Apr 4, 2024
ArcGIS GeoEvent Server1–May 5, 2021
ArcGIS Engine Background Geoprocessing1–Mar 25, 2021
ArcGIS AllSource1–Feb 25, 2025
Enterprise Web App Builder1–Oct 4, 2024
ArcGIS Monitor1–Feb 26, 2025
ArcGIS Web AppBuilder {Developer Edition)1–Dec 19, 2025
ArcGIS Earth1–May 5, 2021
Lerc1–Sep 25, 2026
Portal for ArcGIS Enterprise Experience Sites1–Aug 21, 2025

Exploited and recent CVEs

  • CVE-2026-50096 Medium 6.1 BUG-000187164 - ArcGIS Server has a security vulnerability. 0.3%
  • CVE-2026-50095 Medium 6.1 BUG-000187165 - ArcGIS Server has a security vulnerability. 0.3%
  • CVE-2026-33522 Medium 5.3 BUG-000182936 - ArcGIS Server has a security vulnerability. 0.3%
  • CVE-2026-33521 High 7.5 BUG-000186514 - ArcGIS Server has a security vulnerability. 0.4%
  • CVE-2026-33520 Medium 6.1 BUG-000185167 - ArcGIS Server has a security vulnerability. 0.3%
  • CVE-2026-10757 Critical 9.8 BUG-000187511 - ArcGIS Server has a security vulnerability. 0.4%
  • CVE-2026-69226 Medium 6.5 Portal for ArcGIS has a security vulnerability 0.2%
  • CVE-2026-10759 Medium 5.5 BUG-000171040 Portal for ArcGIS has a security vulnerability 0.2%
  • CVE-2026-69227 Critical 9.8 BUG-000187331 Portal for ArcGIS has a security vulnerability 0.4%
  • CVE-2026-10758 High 7.5 Esri Lerc has a security vulnerability 0.3%
  • CVE-2026-69233 Medium 5.5 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
  • CVE-2026-69234 Medium 6.1 reflected cross site scripting vulnerability in Esri Portal for ArcGIS 0.3%
  • CVE-2026-69235 Medium 6.1 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
  • CVE-2026-69236 Medium 6.1 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
  • CVE-2026-69237 Low 3.8 HTML injection vulnerability in Esri Portal for ArcGIS 0.3%
  • CVE-2026-69232 Medium 5.5 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
  • CVE-2026-69231 Medium 5.5 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
  • CVE-2026-69230 Medium 5.5 stored cross site scripting issue in Esri Portal for ArcGIS 0.2%
  • CVE-2026-69229 Medium 5.4 HTML injection vulnerability in Esri Portal for ArcGIS 0.3%
  • CVE-2026-69228 Medium 5.3 missing authentication vulnerability in Esri Portal for ArcGIS 0.5%
  • CVE-2026-69225 Medium 5.9 information disclosure vulnerability in Esri Portal for ArcGIS 0.5%
  • CVE-2026-69238 Low 3.5 HTML injection vulnerability in Esri Portal for ArcGIS 0.2%
  • CVE-2026-69224 Medium 5.9 information disclosure vulnerability in Esri Portal for ArcGIS 0.5%
  • CVE-2026-13019 Critical 9.8 Missing Authentication 0.8%
  • CVE-2026-13020 High 8.1 Weak Password Recovery Mechanism in Portal for ArcGIS 0.5%
  • CVE-2026-9181 Critical 9.8 Directory Traversal in ArcGIS Server 1.2%
  • CVE-2026-9182 Critical 9.8 Unvalidated File Upload vulnerability in ArcGIS Server. 0.6%
  • CVE-2026-2813 Medium 4.7 Unvalidated Redirect in ArcGIS Server 0.3%
  • CVE-2026-2812 Medium 5.3 Improper Authentication issue in ArcGIS Server 0.4%
  • CVE-2026-33519 Critical 9.8 Incorrect privilege assignment in Portal for ArcGIS 0.3%