1. Home
  2. CVE Database
  3. CVE-2026-33519
CRITICAL · 9.8

CVE-2026-33519

An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kubernetes that did not correctly check permissions assigned to developer credential...

Vulnerability Description

An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kubernetes that did not correctly check permissions assigned to developer credentials.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
EsriPortal For Arcgis11.4
KubernetesKubernetes-
LinuxLinux Kernel-
MicrosoftWindows-

Related Weaknesses (CWE)

CWE-266

References

FAQ

What is CVE-2026-33519?

CVE-2026-33519 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kubernetes that did not correctly check permissions assigned to developer credential...

How severe is CVE-2026-33519?

CVE-2026-33519 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-33519?

Check the references section above for vendor advisories and patch information. Affected products include: Esri Portal For Arcgis, Kubernetes Kubernetes, Linux Linux Kernel, Microsoft Windows.