Security Advisory

CVE-2026-13019

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-07 16:40:53
Last updated 2026-07-08 03:56:44
Assigner Esri
CVSS score 9.8
State PUBLISHED

Description

Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for critical function vulnerability allows a remote, unauthenticated attacker to access an unprotected API.