CVE-2026-69233 is a stored cross-site scripting vulnerability in Esri Portal for ArcGIS versions 11.5 and prior. It enables a remote attacker with administrative privileges to inject malicious code that executes in the context of other users' browsers. The vulnerability has a CVSS 3.1 base score of 5.5 (medium severity) with network attack vector, low complexity, high privileges required, no user interaction, and impacts confidentiality and integrity with no availability impact. No known exploits are reported in the wild. The vulnerability is identified as CWE-79.

An attacker with administrative privileges can inject malicious scripts that execute in the browsers of other users, potentially leading to unauthorized actions or data exposure within the affected Portal for ArcGIS environment. The impact is limited to confidentiality and integrity with no availability impact. The vulnerability requires high privileges and does not require user interaction.

Users working with ArcGIS Enterprise versions 11.1, 11.3, and 11.5 are encouraged to patch by upgrading to the latest long-term support release. Since no specific patch links or vendor advisory details are provided, patch status is not yet confirmed—check the vendor advisory for current remediation guidance.