CVE-2026-10759
MEDIUM
NVD
CVSS Score
5.5
Severity
MEDIUM
Published
Oct 13, 2026
Vendor
unknown
Description
A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without sufficient input neutralization. An authenticated administrator could supply crafted input that modifies the intended LDAP query and causes unintended directory operations.