CVE-2026-9182General(esri / arcgis_server)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch esri arcgis_server systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Esri ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue by uploading a crafted file to the affected endpoint. Successful exploitation could allow arbitrary file upload, potentially allowing for other attacks. This issue impacts all versions of ArcGIS Server on Windows and Linux 12.0 and prior. This issue does not impact ArcGIS Enterprise for Kubernetes.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-434

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • arcgis_server
  • linux_kernel
  • windows

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-07-09); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Products
arcgis_serverlinux_kernelwindows

1 version affected across 3 products

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-07-09: 1Mentions · 2026-07-18: 1Mentions · 2026-07-19: 1Patch / Workaround · 2026-07-09: 1Technical Details · 2026-07-09: 107-0907-1807-19
Signal classification2 categories
General
266.7%
Patch
133.3%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-07-091
Patch1
2026-07-181
General1
2026-07-191
General1
Full discourse3 posts
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    【緊急】CVE-2026-9182 EsriのArcGIS Serverに深刻な脆弱性|即時対応が必要 https://www.cybernote.click/2026/07/13/cve-2026-9182-arcgis-server/ #IT #Security #cybersecurity

    Post summary

    The post announces CVE-2026-9182 affecting Esri ArcGIS Server and urges immediate action, but it offers no technical specifics, exploits, patches, or evidence of active attacks.

    0000053
    208 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    【緊急】CVE-2026-9182 EsriのArcGIS Serverに深刻な脆弱性|即時対応が必要 https://www.cybernote.click/2026/07/13/cve-2026-9182-arcgis-server/ #IT #Security #cybersecurity

    Post summary

    The post announces an urgent vulnerability in Esri's ArcGIS Server (CVE‑2026‑9182) but provides no technical details, PoC, or mitigation information.

    0000053
    208 followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 CRITICAL: CVE-2026-9182 (CVSS 9.8) ArcGIS Server unrestricted file upload flaw allows unauthenticated attackers to upload crafted files for arbitrary file upload. Network exploitable, no user interaction required. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/jDPMotyhz4

    Post summary

    The tweet alerts to CVE-2026-9182, a critical unrestricted file upload flaw in ArcGIS Server, and stresses that an immediate patch is required.

    0000056
    70 followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
Appesriarcgis_server---
OSlinuxlinux_kernel---
OSmicrosoftwindows---

Explore more