1. Home
  2. CVE Database
  3. CVE-2026-33518
CRITICAL · 9.8

CVE-2026-33518

An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that may grant more privi...

Vulnerability Description

An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that may grant more privileges than expected.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
EsriPortal For Arcgis11.5
LinuxLinux Kernel-
MicrosoftWindows-

Related Weaknesses (CWE)

CWE-266

References

FAQ

What is CVE-2026-33518?

CVE-2026-33518 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that may grant more privi...

How severe is CVE-2026-33518?

CVE-2026-33518 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-33518?

Check the references section above for vendor advisories and patch information. Affected products include: Esri Portal For Arcgis, Linux Linux Kernel, Microsoft Windows.