CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-9181 — ArcGIS Server contains a directory traversal vulnerability. An unauthenticated ...

·Source: NIST NVD

Updated:

Executive Summary

ArcGIS Server contains a directory traversal vulnerability. An unauthenticated attacker could exploit this issue by sending crafted path parameters. Successful exploitation could allow access to sensitive files on the system. This issue impacts all versions of ArcGIS Server 12.0 and prior.

Analysis

ArcGIS Server contains a directory traversal vulnerability. An unauthenticated attacker could exploit this issue by sending crafted path parameters. Successful exploitation could allow access to sensitive files on the system. This issue impacts all versions of ArcGIS Server 12.0 and prior. CVSS Score: 9.8. Published: 2026-07-06T19:17:09.553.

Indicators of Compromise (1)

CVE (1)
CVE-2026-9181
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 6, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Steam forum ClickFix attacks infect gamers with XMRig cryptominers

Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but actually infect devices with cryptominers. [...]

BleepingComputer
MEDIUMVulnerability

AU: Sydney nurse accused of downloading patients’ data in alleged ‘breach of trust’

Caitlin Powell reports: A male registered nurse from northern Sydney has been charged after allegedly downloading the data of multiple patients. Police received a report on Wednesday, July 22, that a NSW Health employee had allegedly accessed and downloaded patient information without authorisation. Detectives launched an investigation under Strike Force Civic and, after inquiries, searched a home

DataBreaches.net
MEDIUMVulnerability

No Need to Hack When It’s Leaking: Click to Pray edition

Jessica Lyons reports on today’s entry in the “No Need to Hack When It’s Leaking” files: Click To Pray, a prayer app endorsed by the Pope with hundreds of thousands of users worldwide, has leaked people’s names and email addresses for months – or longer – according to an ethical hacker who said she found... Source

DataBreaches.net