PT-2026-42221 · Esri · Arcgis Server

CVE-2026-2812 · Published 2026-05-20 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ArcGIS Server versions prior to 12.1

Description An improper authentication issue exists in an undocumented administrative endpoint. An unauthenticated attacker can exploit this by sending a crafted request to the endpoint, which may lead to the disruption of the web-based browsing interface.

Recommendations Update ArcGIS Server to a version later than 12.0.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-2812

Affected Products

Arcgis Server

References · 3

• https://esri.com/arcgis-blog/products/trust-arcgis/administration/april2026_security_bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2812 · Security Note
• https://t.me/cveNotify/216089 · Telegram Post