CVE-2026-33518Disclosure(esri / linux_kernel)

LOWCVSS 7.2 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

Patch esri linux_kernel systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that may grant more privileges than expected.

esri CVEs Back to dashboard

2.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/april2026_security_bulletin

Weakness type (CWE)

CWE-266

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

linux_kernel
portal_for_arcgis
windows

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
5 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 2d ago at 2 mentions (2026-04-21); latest day: 2
5 total mentions across 3 days

Affected systems

Vendors

esri linux microsoft

Products

linux_kernelportal_for_arcgiswindows

2 versions affected across 3 products

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

480.0%

Patch

120.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-21	2	Disclosure1Patch1
2026-04-22	1	Disclosure1
2026-04-26	2	Disclosure2

Full discourse5 posts

Orizon@OrizonCyber173d
Patch
🚨 CVE-2026-33518 — CVSS 9.8/10 ██████████ An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/iSNbLbSyPg
Post summary
CVE-2026-33518 is a critical privilege‑assignment flaw in Esri Portal for ArcGIS 11.5 with a patch now available.
1000055
28 followersView on X
Infoflowcloud@infoflowcloud168d
Disclosure
🚨*CVE* CVE-2026-33518 An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer cre… https://www.cve.org/CVERecord?id=CVE-2026-33518 ----- Traducción: CVE-2026-33518 Exi… http://infoflow.cloud`
Post summary
The post simply announces a newly disclosed Esri Portal privilege‑assignment vulnerability, without providing PoC, exploit code, patching guidance, or evidence of active exploitation.
0000039
72 followersView on X
CVE@CVEnew168d
Disclosure
CVE-2026-33518 An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer cre… https://www.cve.org/CVERecord?id=CVE-2026-33518
Post summary
The post announces CVE‑2026‑33518, detailing an incorrect privilege assignment flaw in Esri Portal for ArcGIS 11.5 on Windows and Linux, without providing PoC, exploit, or patch information.
00000255
57.3K followersView on X
0day Signal@0dayPublishing173d
Disclosure
🚨 CVE-2026-33518: Incorrect privilege assignment i... Privilege escalation goldmine: Portal admins can mint dev creds with god-mode access, turning intended restrictions int... https://zerodaysignal.com/vulnerability/CVE-2026-33518 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet reveals a privilege‑escalation vulnerability (CVE‑2026‑33518) and links to a zero‑day signal page implying a PoC, but it does not provide exploit code, evidence of active exploitation, or a patch.
00000101
218 followersView on X
Kaitan ID Security@KaitanSecurity173d
Disclosure
🚨 CRITICAL — CVE-2026-33518 An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows … CVSS 9.8 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2026-33518 #Linux #CyberSecurity #InfoSec
Post summary
A critical privilege escalation vulnerability (CVE-2026-33518) affecting Esri Portal for ArcGIS 11.5 has been disclosed with a CVSS score of 9.8, and no patch or PoC is available yet.
0000010
124 followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	esri	portal_for_arcgis	11.5	-	-
OS	linux	linux_kernel	-	-	-
OS	microsoft	windows	-	-	-

Explore more

Back to dashboard esri CVEs linux CVEs microsoft CVEs linux_kernel vulnerabilities

What researchers are saying

CVE-2026-33518

Orizon[verified]@OrizonCyberPatch

CVE-2026-33518 is a critical privilege‑assignment flaw in Esri Portal for ArcGIS 11.5 with a patch now available.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

A critical privilege escalation vulnerability (CVE-2026-33518) affecting Esri Portal for ArcGIS 11.5 has been disclosed with a CVSS score of 9.8, and no patch or PoC is available yet.

Infoflowcloud@infoflowcloudDisclosure

The post simply announces a newly disclosed Esri Portal privilege‑assignment vulnerability, without providing PoC, exploit code, patching guidance, or evidence of active exploitation.

CVE@CVEnewDisclosure

The post announces CVE‑2026‑33518, detailing an incorrect privilege assignment flaw in Esri Portal for ArcGIS 11.5 on Windows and Linux, without providing PoC, exploit, or patch information.

0day Signal@0dayPublishingDisclosure

The tweet reveals a privilege‑escalation vulnerability (CVE‑2026‑33518) and links to a zero‑day signal page implying a PoC, but it does not provide exploit code, evidence of active exploitation, or a patch.