CVE WATCH / VULNERABILITY DETAIL
CVE-2026-10757
CRITICALCVSS 9.8NVD feed
Published 26 October 2026 · tracked since 27 October 2026
Description
There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service (which could, depending on the service being configured in a non-default access configuration “public”, include an anonym
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-72752 MEDIUM 6.5
- CVE-2026-50095 MEDIUM 6.1
- CVE-2026-116398 MEDIUM 6.5
- CVE-2026-116400 MEDIUM 6.5
- CVE-2026-115922 MEDIUM 6.2
- CVE-2026-115923 MEDIUM 6.5
- CVE-2026-115966 MEDIUM 6.5
- CVE-2026-115918 MEDIUM 6.5
- CVE-2026-115919 MEDIUM 6.2
- CVE-2026-115920 MEDIUM 6.2