← Back

CVE-2026-9182

nvd nist
Published: Jul 6, 2026Modified: Jul 8, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD (Secondary)

Description

Esri ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue by uploading a crafted file to the affected endpoint. Successful exploitation could allow arbitrary file upload, potentially allowing for other attacks. This issue impacts all versions of ArcGIS Server on Windows and Linux 12.0 and prior. This issue does not impact ArcGIS Enterprise for Kubernetes.

Affected (1)

Products: Esri: Arcgis Server
Esri
1 product
Arcgis Server
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Arcgis Server
Up to 12.0
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-434
Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (1)

Source: psirt@esri.com
Vendor Advisory

Timeline

No history available yet.