https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:40:29.106148+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-358044 EUVD-2026-358044 2026-10-02T18:40:29.154952+00:00 EUVD-2026-358044 https://cve.radiocsirt.org/vuln/fkie_cve-2026-69228 fkie_cve-2026-69228 2026-10-02T18:40:29.154985+00:00

There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource (not user content) that should only be accessible by authenticated users. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, or 12.0 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.

 https://cve.radiocsirt.org/vuln/ghsa-vcgh-rjxj-63w5 GHSA-vcgh-rjxj-63w5 2026-10-02T18:40:29.155018+00:00

There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource (not user content) that should only be accessible by authenticated users. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, or 12.0 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2966 WID-SEC-W-2026-2966 — ESRI Portal für ArcGIS: Mehrere Schwachstellen 2026-10-02T18:40:29.155036+00:00

Ein Angreifer kann mehrere Schwachstellen in ESRI Portal für ArcGIS ausnutzen, um Cross-Site-Scripting- und HTML-Injection-Angriffe durchzuführen, die Authentifizierung zu umgehen oder vertrauliche Informationen offenzulegen.