CVE-2026-69227
CRITICAL9.8CVSS v3
—CVSS v2
0.33%
EPSS (exploit probability)
CWE-306CWE
Description
A flaw in Portal for ArcGIS allows unauthenticated access to
certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected routers (0)
No routers currently mapped to this CVE in our database.