VULNERABILITY INTELLIGENCE

CVE-2026-33518

CVSS score9.8 CRITICAL
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-04-21
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that may grant more privileges than expected.

Weakness classification

  • psirt@esri.com: CWE-266

Primary references