← Back

CVE-2026-33518

nvd nist
Published: Apr 21, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that may grant more privileges than expected.

Affected (1)

Esri
1 product
Portal For Arcgis
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Portal For Arcgis
Version 11.5
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-266
Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

References (1)

Source: psirt@esri.com
Vendor Advisory

Timeline

No history available yet.