CVE-2026-69230 is a stored cross-site scripting vulnerability in Esri Portal for ArcGIS versions 11.5 and prior. It enables a remote attacker with administrative privileges to inject malicious code that executes in the context of other users' browsers. The vulnerability is classified under CWE-79 and has a CVSS 3.1 base score of 5.5 (medium severity), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and impacts on confidentiality and integrity with no availability impact. No known exploits in the wild have been reported. The vendor recommends patching and upgrading to the latest long-term support release.

An attacker with administrative privileges can exploit this vulnerability to inject malicious scripts that execute in other users' browsers, potentially leading to unauthorized disclosure or modification of information within the affected application context. The impact affects confidentiality and integrity but does not affect availability. The vulnerability requires high privileges and no user interaction is needed for exploitation.

Users working with ArcGIS Enterprise versions 11.1, 11.3, and 11.5 should apply available patches or upgrade to the latest long-term support release as recommended by the vendor. Since no specific patch links are provided, users should consult Esri's official advisories for the latest remediation guidance. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.