CVE-2026-10757

A SQL injection vulnerability exists in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux . An attacker with access to the service—which could include an anonymous attacker if the service is configured with "public" access—can execute unauthorized database-specific functions. Patc...