{"id":2984877,"date":"2026-10-14T06:17:11","date_gmt":"2026-10-14T13:17:11","guid":{"rendered":"https:\/\/www.esri.com\/arcgis-blog\/?post_type=blog&#038;p=2984877"},"modified":"2026-10-27T12:44:22","modified_gmt":"2026-10-27T19:44:22","slug":"october-2026-arcgis-security-bulletin","status":"publish","type":"blog","link":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin","title":{"rendered":"October 2026 ArcGIS Security Bulletin"},"author":5311,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"_acf_changed":false,"_searchwp_excluded":""},"categories":[37501],"tags":[150392,24081,759222,24071,780941],"industry":[],"product":[763582],"class_list":["post-2984877","blog","type-blog","status-publish","format-standard","hentry","category-administration","tag-announcements","tag-ssamymlgp","tag-cve","tag-security","tag-ssamlmygp","product-trust-arcgis"],"acf":{"short_description":"This security bulletin discusses vulnerabilities and patches provided for eligible ArcGIS software during the month of October, 2026.","flexible_content":[{"acf_fc_layout":"sidebar","content":"<p><strong>Key Highlights<\/strong><\/p>\n<ul>\n<li>The ArcGIS Server Security 2026 Update 3 Patch has been released.<\/li>\n<li>This patch resolves several security vulnerabilities in ArcGIS Server versions 12.1 and earlier on Windows and Linux platforms.<\/li>\n<li>Users working with versions 11.4, 11.2 or earlier are advised to upgrade to a LTS release and apply patches.<\/li>\n<li>While patches are provided for ArcGIS Enterprise versions in general availability and extended support status, all users are advised to upgrade to the latest long-term support release to take advantage of the latest security enhancements offered.<\/li>\n<\/ul>\n","image_reference":false,"layout":"standard","image_reference_figure":"","snippet":"","spotlight_name":"","section_title":"","position":"Right","spotlight_image":false},{"acf_fc_layout":"content","content":"<p><strong>October 13, 2026<\/strong><\/p>\n<p><strong>The ArcGIS Server Security 2026 Update 3 Patch has been released and is available <a href=\"https:\/\/support.esri.com\/en-us\/patches-updates\/2026\/arcgis-server-security-2026-update-3-patch\">here<\/a>.<\/strong><\/p>\n<p>This patch resolves several critical, high, and moderate severity security vulnerabilities in ArcGIS Server versions 12.1 and earlier on Windows and Linux platforms.<\/p>\n<p>This patch was released on October 13th, 2026. We strongly encourage ArcGIS Enterprise customers to install this patch ASAP to minimize risk.<\/p>\n<p><strong>Patch Notes:<\/strong><\/p>\n<ul>\n<li>Cumulative\u00a0\u2013 This patch is cumulative and does not require that you install any previous ArcGIS Server Security patches prior to installing this patch \u2013 Using the Patch Notification Utility can help ease this process. This patch is <strong>NOT<\/strong> dependent on other patches to be in place.<\/li>\n<li>Esri has reserved CVE identifiers for the vulnerabilities fixed in this patch.<\/li>\n<li>Mitigation\u00a0\u2013 In order to mitigate these vulnerabilities, we strongly recommend all ArcGIS Enterprise customers install this patch as soon as possible.\n<ul>\n<li>All issues are immediately remediated by installing this patch.<\/li>\n<li>Your Web Application Firewall (WAF) will help to block malicious patterns.<\/li>\n<li>Implementing the basic profile in the ArcGIS Hardening guide will reduce exposure.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n"},{"acf_fc_layout":"content","content":"<p><strong>Vulnerability Details<\/strong><\/p>\n<ul>\n<li>CVE:\u00a0<a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-10757\">CVE-2026-10757<\/a><\/li>\n<li>CWE: 89<\/li>\n<li>CVSSv31: 9.8 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Temporal CVSSv31: 9.4 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\/RL:O\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Affected versions: (12.1, 12.0, 11.5, 11.3, 11.1)<\/li>\n<li>Platforms: Windows and Linux<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li>CVE:<a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-33521\"> CVE-2026-33521<\/a><\/li>\n<li>CWE: 770<\/li>\n<li>CVSSv31: 7.5 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Temporal CVSSv31: 7.2 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H\/RL:O\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Affected: (12.0, 11.5, 11.3, 11.1)<\/li>\n<li>Platforms: Windows and Linux<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li>CVE: <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-50095\">CVE-2026-50095<\/a><\/li>\n<li>CWE: 79<\/li>\n<li>CVSSv31: 6.1 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Temporal CVSSv31: 5.8 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\/RL:O\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Affected: (12.1, 12.0, 11.5, 11.3, 11.1)<\/li>\n<li>Platforms: Windows and Linux<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li>CVE: <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-50096\">CVE-2026-50096<\/a><\/li>\n<li>CWE: 79<\/li>\n<li>CVSSv31: 6.1 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Temporal CVSSv31: 5.8 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\/RL:O\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Affected: (12.1, 12.0, 11.5, 11.3, 11.1)<\/li>\n<li>Platforms: Windows and Linux<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li>CVE: <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-33520\">CVE-2026-33520<\/a><\/li>\n<li>CWE: 79<\/li>\n<li>CVSSv31: 6.1 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Temporal CVSSv31: 5.8 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N\/RL:O\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Affected: (11.5 only)<\/li>\n<li>Platforms: Windows and Linux<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li>CVE: <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-33522\">CVE-2026-33522<\/a><\/li>\n<li>CWE:285<\/li>\n<li>CVSSv31 :5.3 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:L\/A:N\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Temporal CVSSv31: <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:L\/A:N\/RL:O\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Affected: (12.0, 11.5, 11.3)<\/li>\n<li>Platforms: Windows and Linux<\/li>\n<\/ul>\n"},{"acf_fc_layout":"content","content":"<p><strong>_____________________________________________________________________________________________________________________________<\/strong><\/p>\n"},{"acf_fc_layout":"sidebar","content":"<p><strong>Key Highlights<\/strong><\/p>\n<ul>\n<li>The ArcGIS Velocity for ArcGIS Enterprise 12.1 Patch 1 has been released.<\/li>\n<li>This patch resolves one critical and two moderate severity security vulnerabilities in ArcGIS Velocity for ArcGIS Enterprise version 12.1 on Windows and Linux platforms.<\/li>\n<li>In order to remediate these vulnerabilities, we strongly recommend all ArcGIS Velocity for ArcGIS Enterprise customers install this patch as soon as possible.<\/li>\n<\/ul>\n","image_reference":false,"layout":"standard","image_reference_figure":"","snippet":"","spotlight_name":"","section_title":"","position":"Left","spotlight_image":false},{"acf_fc_layout":"content","content":"<p><strong>October 21, 2026<\/strong><\/p>\n<p><strong>ArcGIS Velocity for ArcGIS Enterprise 12.1 Patch 1 has been released and is available <a href=\"https:\/\/support.esri.com\/en-us\/patches-updates\/2026\/arcgis-velocity-for-arcgis-enterprise-12-1-patch-1\">here<\/a>.<\/strong><\/p>\n<p>This patch resolves three critical and high severity security vulnerabilities in ArcGIS Velocity for ArcGIS Enterprise version 12.1 on Windows and Linux platforms.<\/p>\n<p>This patch was released on October 20th, 2026. We strongly encourage ArcGIS Velocity customers to install this patch ASAP to minimize risk.<\/p>\n<p><strong>Patch Notes:<\/strong><\/p>\n<ul>\n<li>This is the first patch for ArcGIS Velocity and includes all current security fixes.<\/li>\n<li>Remediation \u2013 In order to remediate these vulnerabilities, we strongly recommend all ArcGIS Velocity for ArcGIS Enterprise customers install this patch as soon as possible.<\/li>\n<li>Mitigations include:\n<ul>\n<li>All issues are immediately remediated by installing this patch.<\/li>\n<li>Your Web Application Firewall (WAF) will help to block malicious patterns.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n"},{"acf_fc_layout":"content","content":"<p><strong>Vulnerability Details<\/strong><\/p>\n<ul>\n<li>CVE: <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-50098\">CVE-2026-50098<\/a><\/li>\n<li>CWE: 290<\/li>\n<li>CVSSv31: 9.8 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Temporal CVSSv31: 9.4 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\/RL:O\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Affected versions: (12.1)<\/li>\n<li>Platforms: Windows and Linux<\/li>\n<\/ul>\n<ul>\n<li>CVE: <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-50097\">CVE-2026-50097<\/a><\/li>\n<li>CWE: 306<\/li>\n<li>CVSSv31: 7.5 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Temporal CVSSv31: 7.2 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N\/RL:O\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Affected versions: (12.1)<\/li>\n<li>Platforms: Windows and Linux<\/li>\n<\/ul>\n<ul>\n<li>CVE: <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-50094\">CVE-2026-50094<\/a><\/li>\n<li>CWE: 306<\/li>\n<li>CVSSv31: 5.3 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:L\/I:N\/A:N\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Temporal CVSSv31: 4.4 <a href=\"https:\/\/www.first.org\/cvss\/calculator\/3-1#CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:L\/I:N\/A:N\/RL:O\/CR:L\">Common Vulnerability Scoring System Version 3.1 Calculator<\/a><\/li>\n<li>Affected versions: (12.1)<\/li>\n<li>Platforms: Windows and Linux<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n"}],"related_articles":"","authors":[{"ID":136891,"user_firstname":"Mark","user_lastname":"Bierman","nickname":"Mark Bierman","user_nicename":"mbierman","display_name":"Mark Bierman","user_email":"MBierman@esri.com","user_url":"","user_registered":"2020-12-08 21:10:04","user_description":"","user_avatar":"<img data-del=\"avatar\" src='https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2023\/06\/softwaresecurity-213x200.png' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'\/>"},{"ID":3911,"user_firstname":"Michael","user_lastname":"Young","nickname":"Michael Young","user_nicename":"myoung1000","display_name":"Michael Young","user_email":"myoung@esri.com","user_url":"http:\/\/trust.arcgis.com","user_registered":"2018-03-02 00:15:29","user_description":"","user_avatar":"<img data-del=\"avatar\" src='https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2021\/12\/SSP-213x200.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'\/>"}],"show_article_image":false,"card_image":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2021\/05\/SA-Server.gif","wide_image":false},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.9 (Yoast SEO v25.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>October 2026 ArcGIS Security Bulletin<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"October 2026 ArcGIS Security Bulletin\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin\" \/>\n<meta property=\"og:site_name\" content=\"ArcGIS Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/esrigis\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-27T19:44:22+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@ESRI\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin\"},\"author\":{\"name\":\"Randall Williams\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/6257d65f342fee9c48e7f16f9a428959\"},\"headline\":\"October 2026 ArcGIS Security Bulletin\",\"datePublished\":\"2026-10-14T13:17:11+00:00\",\"dateModified\":\"2026-10-27T19:44:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin\"},\"wordCount\":4,\"publisher\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#organization\"},\"keywords\":[\"announcements\",\"ArcGIS Trust Center\",\"CVE\",\"Security\",\"SSAMLMYGP\"],\"articleSection\":[\"Administration\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin\",\"name\":\"October 2026 ArcGIS Security Bulletin\",\"isPartOf\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#website\"},\"datePublished\":\"2026-10-14T13:17:11+00:00\",\"dateModified\":\"2026-10-27T19:44:22+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.esri.com\/arcgis-blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"October 2026 ArcGIS Security Bulletin\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#website\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/\",\"name\":\"ArcGIS Blog\",\"description\":\"Get insider info from Esri product teams\",\"publisher\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.esri.com\/arcgis-blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#organization\",\"name\":\"Esri\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png\",\"contentUrl\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png\",\"width\":400,\"height\":400,\"caption\":\"Esri\"},\"image\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/esrigis\/\",\"https:\/\/x.com\/ESRI\",\"https:\/\/www.linkedin.com\/company\/5311\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/6257d65f342fee9c48e7f16f9a428959\",\"name\":\"Randall Williams\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/08\/softwaresecurity.png\",\"contentUrl\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/08\/softwaresecurity.png\",\"caption\":\"Randall Williams\"},\"sameAs\":[\"https:\/\/trust.arcgis.com\"],\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/author\/randallwilliams\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"October 2026 ArcGIS Security Bulletin","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin","og_locale":"en_US","og_type":"article","og_title":"October 2026 ArcGIS Security Bulletin","og_url":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin","og_site_name":"ArcGIS Blog","article_publisher":"https:\/\/www.facebook.com\/esrigis\/","article_modified_time":"2026-10-27T19:44:22+00:00","twitter_card":"summary_large_image","twitter_site":"@ESRI","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin#article","isPartOf":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin"},"author":{"name":"Randall Williams","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/6257d65f342fee9c48e7f16f9a428959"},"headline":"October 2026 ArcGIS Security Bulletin","datePublished":"2026-10-14T13:17:11+00:00","dateModified":"2026-10-27T19:44:22+00:00","mainEntityOfPage":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin"},"wordCount":4,"publisher":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#organization"},"keywords":["announcements","ArcGIS Trust Center","CVE","Security","SSAMLMYGP"],"articleSection":["Administration"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin","url":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin","name":"October 2026 ArcGIS Security Bulletin","isPartOf":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#website"},"datePublished":"2026-10-14T13:17:11+00:00","dateModified":"2026-10-27T19:44:22+00:00","breadcrumb":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.esri.com\/arcgis-blog\/"},{"@type":"ListItem","position":2,"name":"October 2026 ArcGIS Security Bulletin"}]},{"@type":"WebSite","@id":"https:\/\/www.esri.com\/arcgis-blog\/#website","url":"https:\/\/www.esri.com\/arcgis-blog\/","name":"ArcGIS Blog","description":"Get insider info from Esri product teams","publisher":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.esri.com\/arcgis-blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.esri.com\/arcgis-blog\/#organization","name":"Esri","url":"https:\/\/www.esri.com\/arcgis-blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png","contentUrl":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png","width":400,"height":400,"caption":"Esri"},"image":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/esrigis\/","https:\/\/x.com\/ESRI","https:\/\/www.linkedin.com\/company\/5311\/"]},{"@type":"Person","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/6257d65f342fee9c48e7f16f9a428959","name":"Randall Williams","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/image\/","url":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/08\/softwaresecurity.png","contentUrl":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/08\/softwaresecurity.png","caption":"Randall Williams"},"sameAs":["https:\/\/trust.arcgis.com"],"url":"https:\/\/www.esri.com\/arcgis-blog\/author\/randallwilliams"}]}},"text_date":"October 14, 2026","author_name":"Multiple Authors","author_page":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/october-2026-arcgis-security-bulletin","custom_image":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2025\/08\/Newsroom-Keyart-Wide-1920-x-1080.jpg","primary_product":"ArcGIS Trust Center","tag_data":[{"term_id":150392,"name":"announcements","slug":"announcements","term_group":0,"term_taxonomy_id":150392,"taxonomy":"post_tag","description":"","parent":0,"count":37,"filter":"raw"},{"term_id":24081,"name":"ArcGIS Trust Center","slug":"ssamymlgp","term_group":0,"term_taxonomy_id":24081,"taxonomy":"post_tag","description":"","parent":0,"count":101,"filter":"raw"},{"term_id":759222,"name":"CVE","slug":"cve","term_group":0,"term_taxonomy_id":759222,"taxonomy":"post_tag","description":"","parent":0,"count":37,"filter":"raw"},{"term_id":24071,"name":"Security","slug":"security","term_group":0,"term_taxonomy_id":24071,"taxonomy":"post_tag","description":"","parent":0,"count":132,"filter":"raw"},{"term_id":780941,"name":"SSAMLMYGP","slug":"ssamlmygp","term_group":0,"term_taxonomy_id":780941,"taxonomy":"post_tag","description":"","parent":0,"count":9,"filter":"raw"}],"category_data":[{"term_id":37501,"name":"Administration","slug":"administration","term_group":0,"term_taxonomy_id":37501,"taxonomy":"category","description":"","parent":0,"count":449,"filter":"raw"}],"product_data":[{"term_id":763582,"name":"ArcGIS Trust Center","slug":"trust-arcgis","term_group":0,"term_taxonomy_id":763582,"taxonomy":"product","description":"Reserved for articles authored by the ArcGIS Trust Center team","parent":36981,"count":96,"filter":"raw"}],"primary_product_link":"https:\/\/www.esri.com\/arcgis-blog\/?s=#&products=trust-arcgis","_links":{"self":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/blog\/2984877","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/users\/5311"}],"replies":[{"embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/comments?post=2984877"}],"version-history":[{"count":20,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/blog\/2984877\/revisions"}],"predecessor-version":[{"id":2986255,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/blog\/2984877\/revisions\/2986255"}],"wp:attachment":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/media?parent=2984877"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/categories?post=2984877"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/tags?post=2984877"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/industry?post=2984877"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/product?post=2984877"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}