CVE-2026-1446 | Esri ArcGIS Pro up to 3.6.0 cross site scripting

A vulnerability was found in Esri ArcGIS Pro up to 3.6.0. It has been rated as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-1446. The attack needs to be performed locally. There is not any exploit available.

Upgrading the affected component is advised.