MEDIUM 5.5 NVD

CVE-2026-10759

A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without suff

A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without sufficient input neutralization. An authenticated administrator could supply crafted input that modifies the intended LDAP query and causes unintended directory operations.

References

https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/september-2026-arcgi

Published: 2026-10-13 · Source: NVD · Feed updated: 2026-10-13

This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-10-13 via NVD.

vulnfeed aggregates 13242 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.