CVE-2026-9181 — Directory Traversal in ArcGIS Server

ArcGIS Server contains a directory traversal vulnerability (CWE-22). An unauthenticated attacker could exploit it by sending crafted path parameters, potentially allowing access to sensitive files on the system. The issue affects all ArcGIS Server versions 12.0 and prior.