CVE-2026-68756

A party with write access to stored session data may affect JFrog Artifactory under specific conditions...

CVE-2026-68759 Integration credential holders may impersonate users in JFrog Access

A holder of a valid integration credential may impersonate other users under specific conditions...

CVE-2026-68759

Technical details about CVE-2026-68759 are not publicly available in the provided documents. The descriptions only state impersonation is possible for credential holders; no affected products, versions, root cause, or fixes are disclosed. Monitor for updates.

CVE-2026-65926

An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known...

CVE-2026-68757 Potential improper SAML signature verification in JFrog Artifactory

A user with access to a valid SAML response may impersonate another user under specific conditions...

CVE-2026-68757

CVE-2026-68757 concerns JFrog Artifactory where a user with a valid SAML response may impersonate another user due to a potential improper SAML signature verification. The connected documents corroborate the basic vulnerability description and label it in CVE lists as a potential SAML-signature-v...

EUVD-2026-57252

A party with write access to stored session data may affect JFrog Artifactory under specific conditions...

CVE-2026-68756

CVE-2026-68756 concerns a potential insecure deserialization in JFrog Artifactory. The CVE records indicate that a party with write access to stored session data may affect Artifactory under specific conditions. Connected sources (CVELIST) label the issue as potential insecure deserialization; no...

CVE-2026-68756 Potential insecure deserialization in JFrog Artifactory

A party with write access to stored session data may affect JFrog Artifactory under specific conditions...

CVE-2026-66382

Technical details for CVE-2026-66382 are not publicly available in the provided documents. Monitor official advisories for updates.

CVE-2026-68760 Potential remember-me authentication bypass in JFrog Artifactory

An unauthenticated user may bypass authentication under specific cache conditions...

CVE-2026-68760

CVE-2026-68760 affects JFrog Artifactory (per CVE listings) with an unauthenticated bypass of authentication under specific cache conditions. The connected documents identify a remember-me authentication bypass scenario but do not specify affected versions, vulnerable component paths, root cause ...

CVE-2026-68755 Bundle writers may alter trusted release information in JFrog Artifactory

A bundle writer may create misleading release promotion information under specific conditions...

CVE-2026-68755

This CVE concerns Artifactory where a bundle writer may alter or create misleading release promotion information under certain conditions. The connected records identify Artifactory’s bundle writer as the affected component, with the underlying issue described as producing misleading release info...

CVE-2026-66376 Deleted users may temporarily retain access to JFrog Artifactory

Credentials for a deleted user may remain valid for a short period under specific conditions...

CVE-2026-66376

This CVE (CVE-2026-66376) affects JFrog Artifactory and involves credentials for a deleted user remaining valid for a short period under certain conditions. The connected documents confirm the issue and its scope, but do not provide concrete technical details such as affected versions, specific c...

CVE-2026-68752

Technical details (affected products, versions, root cause, and remediation) are not publicly available in the provided documents; monitor for updates.

CVE-2026-68752 Project Resource Managers may escalate privileges in JFrog Artifactory

A Project Resource Manager may gain broader administrative privileges under specific conditions...

CVE-2026-68752 Project Resource Managers may escalate privileges in JFrog Artifactory

A Project Resource Manager may gain broader administrative privileges under specific conditions...

PT-2026-71111

Name of the Vulnerable Software and Affected Versions JFrog Artifactory affected versions not specified Description An insecure deserialization issue exists where a party with write access to stored session data may affect the system under specific conditions. Insecure deserialization occurs when...