CVE-2026-33522

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

CVE-2026-33522 BUG-000182936 - ArcGIS Server has a security vulnerability.

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

CVE-2026-33522

Esri ArcGIS Server versions 11.3 through 12.0 are vulnerable to a security flaw allowing a remote, unauthenticated attacker to update service metadata . The root cause is identified as Improper Authorization (CWE-285). A patch is available for versions 12.0, 11.5, and 11.3 in General Availability...

EUVD-2026-110060

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...