CVE-2026-33519 - Vulnerability Analysis

Overview

Esri Portal for ArcGIS 11.4, 11.5, and 12.0 on Windows, Linux, and Kubernetes contains an authorization bypass caused by incorrect permission checks for developer credentials, letting attackers escalate privileges, exploit requires developer credentials.

Severity & Score

Impact

Attackers with developer credentials can bypass authorization, potentially gaining elevated privileges and unauthorized access.

Mitigation

Update to the latest version of Esri Portal for ArcGIS.

References

• https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/april2026_security_bulletin

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner