CVE-2026-33518 - Vulnerability Analysis

Overview

Esri Portal for ArcGIS 11.5 contains an incorrect privilege assignment vulnerability caused by improper privilege settings, letting highly privileged users create developer credentials with excessive privileges, exploit requires high privilege user access.

Severity & Score

Impact

Highly privileged users can create developer credentials with elevated privileges, potentially leading to privilege escalation.

Mitigation

Update to the latest version of Esri Portal for ArcGIS.

References

• https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/april2026_security_bulletin

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner