https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:04:55.733776+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-267513 EUVD-2026-267513 2026-10-02T14:04:55.787492+00:00 EUVD-2026-267513 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1446 fkie_cve-2026-1446 2026-10-02T14:04:55.787528+00:00

There is a Cross‑Site Scripting (XSS) issue in Esri ArcGIS Pro versions 3.6.0 and earlier. ArcGIS Pro is a desktop application, and exploitation is limited to local users interacting with the application; no privileged role or elevated permissions are required beyond standard local user access. A local attacker can supply malicious strings that may be rendered and executed when a specific dialog within ArcGIS Pro is opened. This issue is fixed in ArcGIS Pro version 3.6.1.

 https://cve.radiocsirt.org/vuln/ghsa-rwq8-4chg-7w5w GHSA-rwq8-4chg-7w5w 2026-10-02T14:04:55.787564+00:00

There is a Cross Site Scripting issue in Esri ArcGIS Pro versions 3.6.0 and earlier. A local attacker could supply malicious strings into ArcGIS Pro which may execute when a specific dialog is opened. This issue is fixed in ArcGIS Pro 3.6.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0220 WID-SEC-W-2026-0220 — ESRI ArcGIS: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-02T14:04:55.787582+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ESRI ArcGIS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.