The bottom line: The June patch for Esri ArcGIS Enterprise should be deployed immediately, as attackers are actively exploiting the underlying vulnerabilities.
Esri has released a security patch for ArcGIS Enterprise, whose installation is urgently recommended in light of documented, targeted attacks. The Federal Office for Information Security (BSI) or relevant CERTs have already issued a warning.
Esri released a security update for ArcGIS Enterprise in June that addresses vulnerabilities in the geoinformation system platform. According to CERTs or security authorities, these vulnerabilities are already being exploited in targeted attacks, underscoring the urgency of the patch.
For CISOs, this represents elevated risk in their own infrastructure if ArcGIS Enterprise is in use and has not yet been patched. Geoinformation systems are frequently used for critical administrative and planning tasks – a compromise could impact sensitive geo and map data.
Administrators should deploy the June patch from Esri as a priority and check their own environment for signs of compromise if the system was left unpatched for an extended period.
Source: www.heise.de · Published 8 July 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.