PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-69225 Esri CVE debrief

CVE-2026-69225 is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier. A remote, unauthenticated attacker may exploit this vulnerability to reflect sensitive information in an HTTP response body. This vulnerability has a CVSS score of 5.9 and a severity rating of MEDIUM. Defenders responsible for Esri Portal for ArcGIS systems should assess exposure and prioritize verification and potential remediation. The CVE record and NVD entry provide details on the vulnerability, including its description, CVSS score, and affected versions.

Vendor
Esri
Product
Portal for ArcGIS
CVSS
MEDIUM 5.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-21
Original CVE updated
2026-09-11
Advisory published
2026-08-21
Advisory updated
2026-09-11

Who should care

Defenders responsible for Esri Portal for ArcGIS systems, particularly those using versions 11.5 through 12.0 and earlier, should assess exposure and prioritize verification and potential remediation.

Why it matters

CVE-2026-69225 is a medium-severity information disclosure vulnerability in Esri Portal for ArcGIS. Defenders should verify exposure, assess impact, and prioritize remediation to prevent potential security breaches.

  • Verify exposure of Esri Portal for ArcGIS systems to potential information disclosure
  • Assess the impact of reflected sensitive information on system security
  • Prioritize application of vendor-provided security updates or patches

Technical summary

The vulnerability exists in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier. A remote, unauthenticated attacker may exploit this vulnerability to reflect sensitive information in an HTTP response body. The CVSS score for this vulnerability is 5.9, with a severity rating of MEDIUM.

Defensive priority

Defenders should prioritize verifying exposure and assessing the impact of this vulnerability on their systems, particularly those using Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier.

Recommended defensive actions

  • Verify exposure by checking Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier
  • Assess the impact of this vulnerability on systems using affected versions
  • Review and apply vendor-provided security updates or patches

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description, CVSS score, and affected versions. However, the corpus does not establish exploitation or specific impact, requiring verification from official sources.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-69225 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-69225

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-69225 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-69225

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/august-2026-arcgis-security-bulletin

    [email protected] - Vendor Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.