Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5610 articles · 252591 vulns · 37/41 feeds (7d)
← Back to list
5.3
CVE-2026-33522PATCHED
esri · arcgis server

BUG-000182936 - ArcGIS Server has a security vulnerability.

Description

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or retired status, which are not patch eligible. Users working with unlisted versions are advised to upgrade and apply the patch.

Affected Products

VendorProductVersions
esriarcgis server11.3

References

  • https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/october-2026-arcgis-security-bulletin

Related News (1 articles)

Tier C
VulDB21h ago
CVE-2026-33522 | Esri ArcGIS Server up to 11.x privileges management
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.15.3 MEDIUM
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CISA KEV❌ No
Actively exploited❌ No
Patch available
12.0
CWECWE-285
PublishedOct 26, 2026
Trending Score31
Source articles1
Independent1
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-10757
BUG-000187511 - ArcGIS Server has a security vulnerability.
Trending: 42
HIGHCVE-2026-33521
BUG-000186514 - ArcGIS Server has a security vulnerability.
Trending: 34
MEDIUMCVE-2026-50095
BUG-000187165 - ArcGIS Server has a security vulnerability.
Trending: 21
MEDIUMCVE-2026-33520
BUG-000185167 - ArcGIS Server has a security vulnerability.
Trending: 21
MEDIUMCVE-2026-50096
BUG-000187164 - ArcGIS Server has a security vulnerability.
Trending: 21

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 26, 2026
Discovered by ZDM
Oct 26, 2026
Patch Available
Oct 26, 2026