CVE-2025-67706

ArcGIS Server versions 11.5 and earlier on Windows and Linux have an input-validation flaw in uploaded files. The vulnerability arises from not properly validating uploaded content, enabling remote file uploads. Exploitation is constrained by server-side controls that prevent execution of uploade...