PT-2026-34089 · Esri · Portal For Arcgis

Published 2026-04-21 · Updated 2026-04-21 · CVE-2026-33518

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS version 11.5

Description An incorrect privilege assignment issue exists in Windows and Linux environments. This allows highly privileged users to create developer credentials that may grant more privileges than expected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-33518

Affected Products

Portal For Arcgis

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-33518 · Security Note
• https://esri.com/arcgis-blog/products/trust-arcgis/administration/april2026_security_bulletin · Note
• https://twitter.com/OrizonCyber/status/2046725699650642077 · Twitter Post