← Database

CVE-2026-33518

CRITICAL CVSS: 9.8 Published: 2026-04-21 Modified: 2026-06-17

Description

An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that may grant more privileges than expected.

Affected Platforms

Microsoft WindowsLinux Linux KernelEsri Portal For Arcgis

Weakness Type

CWE-266

References