ArcGIS Server before 12.1 affected by vulnerabilities, Cyber Centre says
Original title: Esri security advisory (AV26-1088)
The October 27 notice tells administrators to review Esri’s October 2026 bulletin and apply updates when available.
Canada’s Cyber Centre published advisory AV26-1088 on October 27, 2026, stating that as of October 26 Esri’s ArcGIS Server prior to 12.1 is affected by vulnerabilities. The notice does not name the flaws, give a severity or say whether they are being exploited. It directs users and administrators to Esri’s October 2026 ArcGIS Security Bulletin and security advisories and to apply necessary updates as they become available.
Unconfirmed: The notice does not describe the vulnerabilities, their impact, or whether fixes are already available.
- The Cyber Centre serial number is AV26-1088.
- The only affected product named is ArcGIS Server prior to 12.1.
- No CVE identifiers or fixed build are stated in the notice.
| Product | Affected |
|---|---|
| Esri ArcGIS Server | Prior to 12.1 |
- 1.Review Esri’s October 2026 ArcGIS Security Bulletin and apply necessary updates.
- Vendors
- Esri
- Products
- ArcGIS Server
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1088 Date: October 27, 2026 As of October 26, 2026, Esri is affected by vulnerabilities in the following product: ArcGIS Server Prior to 12. 1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. October 2026 ArcGIS Security Bulletin Esri Security Advisories
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.