PT-2026-65106

Name of the Vulnerable Software and Affected Versions JFrog affected versions not specified Description Incorrect authorization validation in the refresh token signature allows users without administrative privileges to obtain a signed JFrog administrator token, leading to potential privilege...

CVE-2026-65616: Improper Verification of Cryptographic Signature

Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token...