CVE-2026-69227— BUG-000187331 Portal for ArcGIS has a security vulnerability
Quick assessment
Affected
Esri Portal for ArcGIS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在特定条件下，Portal for ArcGIS 存在一个漏洞，允许未经身份验证的用户访问某些 /portaladmin/local API 端点。这可能使攻击者能够访问本应需要身份验证的管理功能。
Possible ATT&CK Techniques 1 AI
T1133 · External Remote ServicesAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Esri | Portal for ArcGIS | ≤ 12.2 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-69227
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
BUG-000187331 Portal for ArcGIS has a security vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw in Portal for ArcGIS allows unauthenticated access to certain /portaladmin/local API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Esri | Portal for ArcGIS | 0 ~ 12.2 | - |
|
II. Public POCs for CVE-2026-69227
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-69227
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-69227 (1)
Same Patch Batch · Esri · 2026-10-13 · 3 CVEs total
| CVE-2026-69226 | 6.5 MEDIUM | Portal for ArcGIS has a security vulnerability |
| CVE-2026-10759 | 5.5 MEDIUM | BUG-000171040 Portal for ArcGIS has a security vulnerability |
IV. Related Vulnerabilities
Same product: Portal for ArcGIS
-
CVE-2026-69226
Portal for ArcGIS has a security vulnerability -
CVE-2026-10759
BUG-000171040 Portal for ArcGIS has a security vulnerability -
CVE-2026-69233
stored cross site scripting issue in Esri Portal for ArcGIS -
CVE-2026-69234
reflected cross site scripting vulnerability in Esri Portal -
CVE-2026-69235
stored cross site scripting issue in Esri Portal for ArcGIS
Same vendor: Esri
-
CVE-2026-69226
Portal for ArcGIS has a security vulnerability -
CVE-2026-10759
BUG-000171040 Portal for ArcGIS has a security vulnerability -
CVE-2026-10758
Esri Lerc has a security vulnerability -
CVE-2026-69233
stored cross site scripting issue in Esri Portal for ArcGIS -
CVE-2026-69234
reflected cross site scripting vulnerability in Esri Portal
Same weakness: CWE-306
-
CVE-2026-108473
Improper Authentication and Credential Exposure in Multiple -
CVE-2026-97793
Windows Setup and Deployment Elevation of Privilege Vulnerab -
CVE-2026-96858
Windows Security Account Manager Tampering Vulnerability -
CVE-2026-85884
Windows Health and Optimized Experiences Service Elevation o -
CVE-2026-83656
Windows Modern Device Management (MDM) Tampering Vulnerabili
V. Comments for CVE-2026-69227
No comments yet