Security Advisory
CVE-2026-13019
9.8
CRITICAL
Vulnerability Description
Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for critical function vulnerability allows a remote, unauthenticated attacker to access an unprotected API.
Published Date
July 7, 2026
Official Source
NIST NVD Advisory