CVE-2026-2812
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
May 20, 2026
Vendor
unknown
Description
ArcGIS Server contains an improper authentication vulnerability in an undocumented administrative endpoint. An unauthenticated attacker could exploit this issue by sending a crafted request to the endpoint. Successful exploitation may result in disruption of the web-based browsing interface. This issue affects ArcGIS Server 12.0 and earlier.