NVD CRITICAL: CVE-2026-9181 — ArcGIS Server contains a directory traversal vulnerability. An unauthenticated ...

Monday, July 6, 2026 at 07:17 PM UTC·Source: NIST NVD

Updated: Monday, July 6, 2026 at 08:00 PM UTC

Executive Summary

ArcGIS Server contains a directory traversal vulnerability. An unauthenticated attacker could exploit this issue by sending crafted path parameters. Successful exploitation could allow access to sensitive files on the system. This issue impacts all versions of ArcGIS Server 12.0 and prior.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-9181

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Jul 6, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

USA Fencing Lunges Into the Hidden Identity Challenge in Amateur Sports

The organization behind Team USA's Olympic/Paralympic fencing teams has automated identity verification to handle growing membership, cutting manual review time while ensuring athletes compete in the correct categories.

2m agoDark Reading

CRITICALVulnerabilityNEW

Microsoft almost gave away the keys to everyone’s Azure Cosmos DBs

Microsoft has had a narrow escape from total embarrassment: A security company uncovered a critical vulnerability that could have compromised all Azure Cosmos DB databases — both those of customers and Microsoft’s own. Google subsidiary Wiz found a flaw in the database’s Gremlin API, usually used for storing and managing property graph data. If bad actors had discovered it first, they could have e

8m agoCSO Online

MEDIUMVulnerabilityNEW

UniCredit, Accenture, and IBM join forces for pan-European banking expansion

UniCredit, one of Europe's leading pan-European banking groups, Accenture and IBM have announced a long-term strategic collaboration that establishes the technology foundation supporting UniCredit's growth across the thirteen European markets in which the Group operates.

21m agoFinextra