CVE-2026-9182 — Unvalidated File Upload Vulnerability in ArcGIS Server

ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could upload a crafted file to the affected endpoint, and successful exploitation could allow arbitrary file upload.