---
id: CVE-2026-69228
title: >-
  There is a missing authentication vulnerability in Esri Portal for ArcGIS
  versions 12.0 and prior that may allow a remote, unauthenticated attacker to
  access a specific resource (not user content) that should only be accessible
  by authen…
summary: >-
  There is a missing authentication vulnerability in Esri Portal for ArcGIS
  versions 12.0 and prior that may allow a remote, unauthenticated attacker to
  access a specific resource (not user content) that should only be accessible
  by authen…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-306
vendor: esri
product: portal_for_arcgis
affected:
  - portal_for_arcgis < 11.1
  - portal_for_arcgis = 11.1
  - portal_for_arcgis = 11.2
  - portal_for_arcgis = 11.3
  - portal_for_arcgis = 11.4
  - portal_for_arcgis = 11.5
  - portal_for_arcgis = 12.0
patched:
  - portal_for_arcgis 11.1
published: '2026-08-21'
updated: '2026-09-11'
sourceUpdated: '2026-09-11T17:51:42.023'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-69228'
references:
  - url: >-
      https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/august-2026-arcgis-security-bulletin
    label: psirt@esri.com
tags:
  - nvd
epss: 0.00343
epssPercentile: 0.27903
ingestedAt: '2026-09-11T18:53:56.459Z'
---

## Overview

There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource (not user content) that should only be accessible by authenticated users. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, or 12.0 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.

## Affected

- `portal_for_arcgis < 11.1`
- `portal_for_arcgis = 11.1`
- `portal_for_arcgis = 11.2`
- `portal_for_arcgis = 11.3`
- `portal_for_arcgis = 11.4`
- `portal_for_arcgis = 11.5`
- `portal_for_arcgis = 12.0`

## Remediation

Upgrade past the affected range:

- `portal_for_arcgis 11.1`