{"id":2979067,"date":"2026-08-05T11:58:55","date_gmt":"2026-08-05T18:58:55","guid":{"rendered":"https:\/\/www.esri.com\/arcgis-blog\/?post_type=blog&#038;p=2979067"},"modified":"2026-08-05T12:05:29","modified_gmt":"2026-08-05T19:05:29","slug":"august-2026-arcgis-security-bulletin","status":"publish","type":"blog","link":"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin","title":{"rendered":"August 2026 ArcGIS Security Bulletin"},"author":5311,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"_acf_changed":false,"_searchwp_excluded":""},"categories":[37501],"tags":[150392,24081,759222,24071,780941],"industry":[],"product":[36571,763582],"class_list":["post-2979067","blog","type-blog","status-publish","format-standard","hentry","category-administration","tag-announcements","tag-ssamymlgp","tag-cve","tag-security","tag-ssamlmygp","product-arcgis-enterprise","product-trust-arcgis"],"acf":{"short_description":"The Portal for ArcGIS 2026 Security Update 3 patch has been released, resolving several security vulnerabilities in versions 12.1 and prior. ","flexible_content":[{"acf_fc_layout":"sidebar","content":"<p><strong>Key highlights<\/strong><\/p>\n<ul>\n<li>Portal for ArcGIS 2026 Security Update 3 has been released.<\/li>\n<li>This patch resolves several medium and low severity security vulnerabilities in Portal for ArcGIS versions 12.1 and earlier.<\/li>\n<li>While patched are provided for Portal for ArcGIS versions in general availability and extended support status, all users are advised to upgrade to the latest long-term support release.<\/li>\n<\/ul>\n","image_reference":false,"layout":"standard","image_reference_figure":"","snippet":"","spotlight_name":"","section_title":"","position":"Right","spotlight_image":false},{"acf_fc_layout":"content","content":"<p>The Portal for ArcGIS 2026 Security Update 3 patch has been released and is available <a href=\"https:\/\/support.esri.com\/en-us\/patches-updates\/2026\/portal-for-arcgis-security-2026-update-3-patch\">here<\/a>.<\/p>\n<p>This patch resolves several medium and low severity security vulnerabilities in Portal for ArcGIS versions 12.1 and earlier.<\/p>\n<p>This patch was released August 4th, 2026. We strongly encourage ArcGIS Enterprise customers apply this patch within the next two weeks to minimize risk.<\/p>\n"},{"acf_fc_layout":"content","content":"<p><strong>Patch Notes:<\/strong><\/p>\n<ul>\n<li>Cumulative\u00a0\u2013 This patch is cumulative and does not require that you install any previous Portal for ArcGIS Security patches prior to installing this patch \u2013 Using the Patch Notification Utility can help ease this process. This patch is NOT dependent on other patches to be in place.<\/li>\n<li>Esri has reserved CVE identifiers for the vulnerabilities fixed in this patch.<\/li>\n<li>Mitigation\u00a0\u2013 In order to mitigate these vulnerabilities, we strongly recommend all ArcGIS Enterprise customers install this patch as soon as possible.\n<ul>\n<li>Your Web Application Firewall (WAF) will help to block malicious patterns.<\/li>\n<li>Implementing the basic profile in the ArcGIS Hardening guide will reduce exposure.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong>Vulnerability Details\u00a0<\/strong><\/p>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69234\"><strong>CVE-2026-69234<\/strong><\/a>: There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 11.5 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim\u2019s browser. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release. Users working with ArcGIS Web App Builder developer edition are advised to migrate to ArcGIS Experience Builder, as ArcGIS Web App Builder developer edition is unsupported when this CVE is assigned.<\/p>\n<ul>\n<li>CWE-79 &#8211; Improper Neutralization of Input During Web Page Generation (&#8216;Cross-site Scripting&#8217;)<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\">6.1 (medium)<\/a><\/li>\n<li>Temporal CVSSv3.1:<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\/RL:O\"> 5.8 (medium)<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 11.5 and prior<\/li>\n<\/ul>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69235\"><strong>CVE-2026-69235<\/strong><\/a>: There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary in a victim\u2019s browser. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.<\/p>\n<ul>\n<li>CWE-79 &#8211; Improper Neutralization of Input During Web Page Generation (&#8216;Cross-site Scripting&#8217;)<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\">6.1 (medium)<\/a><\/li>\n<li>Temporal CVSSv3.1:<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\/RL:O\"> 5.8 (medium)<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 11.5 and prior<\/li>\n<\/ul>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69236\"><strong>CVE-2026-69236<\/strong><\/a>: There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim\u2019s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, 12.0 or 12.1 are encouraged to patch. All users are advised to upgrade to the latest long-term support release and apply the patch.<\/p>\n<ul>\n<li>CWE-79 &#8211; Improper Neutralization of Input During Web Page Generation (&#8216;Cross-site Scripting&#8217;)<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\">6.1 (medium)<\/a><\/li>\n<li>Temporal CVSSv3.1:<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\/RL:O\"> 5.8 (medium)<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 12.1 and prior<\/li>\n<\/ul>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69224\"><strong>CVE-2026-69224<\/strong><\/a>: There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body.<\/p>\n<ul>\n<li>CWE-200 Exposure of Sensitive Information to an Unauthorized Actor<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N\">5.9 (medium)<\/a><\/li>\n<li>Temporal CVSSv3.1:<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N\/RL:O\"> 5.7 (medium)<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 12.0 and prior<\/li>\n<\/ul>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69225\"><strong>CVE-2026-69225<\/strong><\/a>: There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body.<\/p>\n<ul>\n<li>CWE-200 Exposure of Sensitive Information to an Unauthorized Actor<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N\">5.9 (medium)<\/a><\/li>\n<li>Temporal CVSSv3.1:<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N\/RL:O\"> 5.7 (medium)<\/a><\/li>\n<li>Affected: Portal for ArcGIS versions 11.5 and 12.0 only<\/li>\n<\/ul>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69230\"><strong>CVE-2026-69230<\/strong><\/a>: There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim\u2019s browser. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.<\/p>\n<ul>\n<li>CWE-79 &#8211; Improper Neutralization of Input During Web Page Generation (&#8216;Cross-site Scripting&#8217;)<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:L\/I:L\/A:N\">5.5 (medium)<\/a><\/li>\n<li>Temporal CVSSv3.1:<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:L\/I:L\/A:N\/RL:O\"> 5.3 (medium)<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 11.5 and prior<\/li>\n<\/ul>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69231\"><strong>CVE-2026-69231<\/strong><\/a>: There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim\u2019s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.<\/p>\n<ul>\n<li>CWE-79 &#8211; Improper Neutralization of Input During Web Page Generation (&#8216;Cross-site Scripting&#8217;)<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:L\/I:L\/A:N\">5.5 (medium)<\/a><\/li>\n<li>Temporal CVSSv3.1:<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:L\/I:L\/A:N\/RL:O\"> 5.3 (medium)<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 11.5 and prior<\/li>\n<\/ul>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69232\"><strong>CVE-2026-69232<\/strong><\/a>: There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim\u2019s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.<\/p>\n<ul>\n<li>CWE-79 &#8211; Improper Neutralization of Input During Web Page Generation (&#8216;Cross-site Scripting&#8217;)<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:L\/I:L\/A:N\">5.5 (medium)<\/a><\/li>\n<li>Temporal CVSSv3.1:<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:L\/I:L\/A:N\/RL:O\"> 5.3 (medium)<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 11.5 and prior<\/li>\n<\/ul>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69233\"><strong>CVE-2026-69233<\/strong><\/a>: There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim\u2019s browser. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.<\/p>\n<ul>\n<li>CWE-79 &#8211; Improper Neutralization of Input During Web Page Generation (&#8216;Cross-site Scripting&#8217;)<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:L\/I:L\/A:N\">5.5 (medium)<\/a><\/li>\n<li>Temporal CVSSv3.1:<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:L\/I:L\/A:N\/RL:O\"> 5.3 (medium)<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 11.5 and prior<\/li>\n<\/ul>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69229\"><strong>CVE-2026-69229<\/strong><\/a>: There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authenticated attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 and 12.0 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.<\/p>\n<ul>\n<li>CWE-79 &#8211; Improper Neutralization of Input During Web Page Generation (&#8216;Cross-site Scripting&#8217;)<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:L\/I:L\/A:N 5.4\">5.4 (medium)<\/a><\/li>\n<li>Temporal CVSSv3.1: (<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:L\/I:L\/A:N\/RL:O\">5.2 medium)<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 12.0 and prior<\/li>\n<\/ul>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69228\"><strong>CVE-2026-69228<\/strong><\/a>: There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource (not user content) that should only be accessible by authenticated users. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, or 12.0 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.<\/p>\n<ul>\n<li>CWE-306: Missing Authentication for Critical Function<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:L\/I:N\/A:N\">5.3 (medium)<\/a><\/li>\n<li>Temporal CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:L\/I:N\/A:N\/RL:O\">5.1 medium<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 12.0 and prior<\/li>\n<\/ul>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-69237\"><strong>CVE-2026-69237<\/strong><\/a>: There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.3 and prior that allows a remote attacker with administrative privileges to insert arbitrary HTML into an administrative API. Users working with ArcGIS Enterprise 11.1, and 11.3 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.<\/p>\n<ul>\n<li>CWE-79 &#8211; Improper Neutralization of Input During Web Page Generation (&#8216;Cross-site Scripting&#8217;)<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:L\/I:L\/A:N 5.4\">3.8 (low)<\/a><\/li>\n<li>Temporal CVSSv3.1: (<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:U\/C:L\/I:L\/A:N\/RL:O\">3.7 low)<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 11.3, 11.1 and prior<\/li>\n<\/ul>\n<p><a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:U\/C:L\/I:L\/A:N\"><strong>CVE-2026-69238<\/strong><\/a>: There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.<\/p>\n<ul>\n<li>CWE-79 &#8211; Improper Neutralization of Input During Web Page Generation (&#8216;Cross-site Scripting&#8217;)<\/li>\n<li>Base CVSSv3.1: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:R\/S:U\/C:L\/I:L\/A:N\">3.5 (low)<\/a><\/li>\n<li>Temporal CVSSv3.1: (<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:R\/S:U\/C:L\/I:L\/A:N\/RL:O\">3.4 low)<\/a><\/li>\n<li>Affected: All Portal for ArcGIS versions 11.3, 11.1 and prior<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n"}],"related_articles":"","authors":[{"ID":5311,"user_firstname":"Randall","user_lastname":"Williams","nickname":"Randall Williams","user_nicename":"randallwilliams","display_name":"Randall Williams","user_email":"randall_williams@esri.com","user_url":"https:\/\/trust.arcgis.com","user_registered":"2018-03-02 00:17:03","user_description":"","user_avatar":"<img data-del=\"avatar\" src='https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/08\/softwaresecurity.png' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'\/>"},{"ID":136891,"user_firstname":"Mark","user_lastname":"Bierman","nickname":"Mark Bierman","user_nicename":"mbierman","display_name":"Mark Bierman","user_email":"MBierman@esri.com","user_url":"","user_registered":"2020-12-08 21:10:04","user_description":"","user_avatar":"<img data-del=\"avatar\" src='https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2023\/06\/softwaresecurity-213x200.png' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'\/>"},{"ID":3911,"user_firstname":"Michael","user_lastname":"Young","nickname":"Michael Young","user_nicename":"myoung1000","display_name":"Michael Young","user_email":"myoung@esri.com","user_url":"http:\/\/trust.arcgis.com","user_registered":"2018-03-02 00:15:29","user_description":"","user_avatar":"<img data-del=\"avatar\" src='https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2021\/12\/SSP-213x200.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'\/>"}],"show_article_image":false,"card_image":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2021\/07\/SA-Portal.gif","wide_image":false},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.9 (Yoast SEO v25.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>August 2026 ArcGIS Security Bulletin<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"August 2026 ArcGIS Security Bulletin\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin\" \/>\n<meta property=\"og:site_name\" content=\"ArcGIS Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/esrigis\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-05T19:05:29+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@ESRI\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin\"},\"author\":{\"name\":\"Randall Williams\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/6257d65f342fee9c48e7f16f9a428959\"},\"headline\":\"August 2026 ArcGIS Security Bulletin\",\"datePublished\":\"2026-08-05T18:58:55+00:00\",\"dateModified\":\"2026-08-05T19:05:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin\"},\"wordCount\":4,\"publisher\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#organization\"},\"keywords\":[\"announcements\",\"ArcGIS Trust Center\",\"CVE\",\"Security\",\"SSAMLMYGP\"],\"articleSection\":[\"Administration\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin\",\"name\":\"August 2026 ArcGIS Security Bulletin\",\"isPartOf\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#website\"},\"datePublished\":\"2026-08-05T18:58:55+00:00\",\"dateModified\":\"2026-08-05T19:05:29+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.esri.com\/arcgis-blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"August 2026 ArcGIS Security Bulletin\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#website\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/\",\"name\":\"ArcGIS Blog\",\"description\":\"Get insider info from Esri product teams\",\"publisher\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.esri.com\/arcgis-blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#organization\",\"name\":\"Esri\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png\",\"contentUrl\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png\",\"width\":400,\"height\":400,\"caption\":\"Esri\"},\"image\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/esrigis\/\",\"https:\/\/x.com\/ESRI\",\"https:\/\/www.linkedin.com\/company\/5311\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/6257d65f342fee9c48e7f16f9a428959\",\"name\":\"Randall Williams\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/08\/softwaresecurity.png\",\"contentUrl\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/08\/softwaresecurity.png\",\"caption\":\"Randall Williams\"},\"sameAs\":[\"https:\/\/trust.arcgis.com\"],\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/author\/randallwilliams\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"August 2026 ArcGIS Security Bulletin","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin","og_locale":"en_US","og_type":"article","og_title":"August 2026 ArcGIS Security Bulletin","og_url":"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin","og_site_name":"ArcGIS Blog","article_publisher":"https:\/\/www.facebook.com\/esrigis\/","article_modified_time":"2026-08-05T19:05:29+00:00","twitter_card":"summary_large_image","twitter_site":"@ESRI","twitter_misc":{"Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin#article","isPartOf":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin"},"author":{"name":"Randall Williams","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/6257d65f342fee9c48e7f16f9a428959"},"headline":"August 2026 ArcGIS Security Bulletin","datePublished":"2026-08-05T18:58:55+00:00","dateModified":"2026-08-05T19:05:29+00:00","mainEntityOfPage":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin"},"wordCount":4,"publisher":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#organization"},"keywords":["announcements","ArcGIS Trust Center","CVE","Security","SSAMLMYGP"],"articleSection":["Administration"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin","url":"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin","name":"August 2026 ArcGIS Security Bulletin","isPartOf":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#website"},"datePublished":"2026-08-05T18:58:55+00:00","dateModified":"2026-08-05T19:05:29+00:00","breadcrumb":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.esri.com\/arcgis-blog\/"},{"@type":"ListItem","position":2,"name":"August 2026 ArcGIS Security Bulletin"}]},{"@type":"WebSite","@id":"https:\/\/www.esri.com\/arcgis-blog\/#website","url":"https:\/\/www.esri.com\/arcgis-blog\/","name":"ArcGIS Blog","description":"Get insider info from Esri product teams","publisher":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.esri.com\/arcgis-blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.esri.com\/arcgis-blog\/#organization","name":"Esri","url":"https:\/\/www.esri.com\/arcgis-blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png","contentUrl":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png","width":400,"height":400,"caption":"Esri"},"image":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/esrigis\/","https:\/\/x.com\/ESRI","https:\/\/www.linkedin.com\/company\/5311\/"]},{"@type":"Person","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/6257d65f342fee9c48e7f16f9a428959","name":"Randall Williams","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/image\/","url":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/08\/softwaresecurity.png","contentUrl":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/08\/softwaresecurity.png","caption":"Randall Williams"},"sameAs":["https:\/\/trust.arcgis.com"],"url":"https:\/\/www.esri.com\/arcgis-blog\/author\/randallwilliams"}]}},"text_date":"August 5, 2026","author_name":"Multiple Authors","author_page":"https:\/\/www.esri.com\/arcgis-blog\/products\/arcgis-enterprise\/administration\/august-2026-arcgis-security-bulletin","custom_image":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2025\/08\/Newsroom-Keyart-Wide-1920-x-1080.jpg","primary_product":"ArcGIS Enterprise","tag_data":[{"term_id":150392,"name":"announcements","slug":"announcements","term_group":0,"term_taxonomy_id":150392,"taxonomy":"post_tag","description":"","parent":0,"count":33,"filter":"raw"},{"term_id":24081,"name":"ArcGIS Trust Center","slug":"ssamymlgp","term_group":0,"term_taxonomy_id":24081,"taxonomy":"post_tag","description":"","parent":0,"count":98,"filter":"raw"},{"term_id":759222,"name":"CVE","slug":"cve","term_group":0,"term_taxonomy_id":759222,"taxonomy":"post_tag","description":"","parent":0,"count":34,"filter":"raw"},{"term_id":24071,"name":"Security","slug":"security","term_group":0,"term_taxonomy_id":24071,"taxonomy":"post_tag","description":"","parent":0,"count":129,"filter":"raw"},{"term_id":780941,"name":"SSAMLMYGP","slug":"ssamlmygp","term_group":0,"term_taxonomy_id":780941,"taxonomy":"post_tag","description":"","parent":0,"count":6,"filter":"raw"}],"category_data":[{"term_id":37501,"name":"Administration","slug":"administration","term_group":0,"term_taxonomy_id":37501,"taxonomy":"category","description":"","parent":0,"count":443,"filter":"raw"}],"product_data":[{"term_id":36571,"name":"ArcGIS Enterprise","slug":"arcgis-enterprise","term_group":0,"term_taxonomy_id":36571,"taxonomy":"product","description":"","parent":0,"count":1013,"filter":"raw"},{"term_id":763582,"name":"ArcGIS Trust Center","slug":"trust-arcgis","term_group":0,"term_taxonomy_id":763582,"taxonomy":"product","description":"Reserved for articles authored by the ArcGIS Trust Center team","parent":36981,"count":92,"filter":"raw"}],"primary_product_link":"https:\/\/www.esri.com\/arcgis-blog\/?s=#&products=arcgis-enterprise","_links":{"self":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/blog\/2979067","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/users\/5311"}],"replies":[{"embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/comments?post=2979067"}],"version-history":[{"count":0,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/blog\/2979067\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/media?parent=2979067"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/categories?post=2979067"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/tags?post=2979067"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/industry?post=2979067"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/product?post=2979067"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}