CVE WATCH / VULNERABILITY DETAIL
CVE-2026-50095
MEDIUMCVSS 6.1NVD feed
Published 26 October 2026 · tracked since 27 October 2026
Description
There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim’s browser. A patch is provided for ArcG
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-72752 MEDIUM 6.5
- CVE-2026-116398 MEDIUM 6.5
- CVE-2026-116400 MEDIUM 6.5
- CVE-2026-115922 MEDIUM 6.2
- CVE-2026-115923 MEDIUM 6.5
- CVE-2026-115966 MEDIUM 6.5
- CVE-2026-115918 MEDIUM 6.5
- CVE-2026-115919 MEDIUM 6.2
- CVE-2026-115920 MEDIUM 6.2
- CVE-2026-115921 MEDIUM 6.2