LIVE · cybersecurity feed
Live wire
vendor

Esri

4 CVEs published in the last four months. Exploited flaws first.

Critical3
High1
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-91819.8criticalarcgis serverEsri ArcGIS Server contains a directory traversal vulnerability.113d ago
CVE-2026-91829.8criticalarcgis serverEsri ArcGIS Server contains an unrestricted file upload vulnerability.113d ago
CVE-2026-130199.8criticalportal for arcgisEsri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication fo112d ago
CVE-2026-130208.1highportal for arcgisA Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earli112d ago

Filter the full tracker by Esri →