CyberSIXT Search
Vendor

Esri

No Esri CVE is in the CISA KEV catalogue.

Tracked since 2 Jun · latest article Tue 2 Jun · RSS

High exploit odds
0
≥ p95, not in KEV

Exploited, by due date

CSV download

No Esri CVE is in the CISA KEV catalogue.

Products

1 products · 2 CVEs in coverage
ArcGIS Server2 CVEs · 0 in KEVlatest 2 Jun

Coverage

1 articles · all timeFull timeline →

One article so far, 2 Jun. A pattern appears once more outlets cover Esri.

1
  1. Esri fixes critical ArcGIS Server flaws after CVE-2026-9181 alertSecurityOnline
  1. Esri fixes critical ArcGIS Server flaws after CVE-2026-9181 alertSecurityOnline

All CVEs in coverage

2
CVE-2026-9181Directory Traversal in ArcGIS ServerCVSS9.8Critical–Not in KEV1.2%EPSS1article
CVE-2026-9182Unvalidated File Upload vulnerability in ArcGIS Server.CVSS9.8Medium–Not in KEV0.6%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

High exploit odds means FIRST EPSS percentile ≥ 95, excluding entries in CISA KEV.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device