CVE-2026-70547 Potential unauthorized metadata exposure in JFrog Artifactory

An authenticated user without repository read permission may access package metadata under specific conditions...

CVE-2026-70547 Potential unauthorized metadata exposure in JFrog Artifactory

An authenticated user without repository read permission may access package metadata under specific conditions...

EUVD-2026-57260

An authenticated user without repository read permission may access package metadata under specific conditions...

CVE-2026-70547

Technical details about CVE-2026-70547 are not publicly available in the provided documents. Monitor for updates from official advisories before drawing conclusions on impact, affected products, or remediation.

CVE-2026-66378

An authenticated user without repository read permission may access private NuGet metadata under specific conditions...

CVE-2026-66379

An authenticated user may view private Puppet module metadata without repository read access...

CVE-2026-66375

A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...

CVE-2026-66380

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...

CVE-2026-66379

An authenticated user may view private Puppet module metadata without repository read access...

UBUNTU-CVE-2026-66379

An authenticated user may view private Puppet module metadata without repository read access...

CVE-2026-49262

In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route cmsproxy is vulnerable to a Server-Side Request Forgery SSRF attack via DNS Rebinding. A Time-of-Check to Time-of-Use TOCTOU race condition exists between the URL validation phase and the actua...

CVE-2026-66375

CVE-2026-66375 concerns JFrog Artifactory metadata : a low-privilege authenticated user can permanently remove protected internal metadata across repositories under specific conditions. The issue is described across multiple sources (NVD, CVE Registry) with related CVSS 3.1 data: AV:N/AC:L/PR:L/U...

CVE-2026-66375 Low-privilege users may remove protected Artifactory metadata

A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...

CVE-2026-66375 Low-privilege users may remove protected Artifactory metadata

A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...

EUVD-2026-57254

A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...

CVE-2026-66379

CVE-2026-66379 describes an issue where an authenticated user can view private Puppet module metadata without repository read access. The provided documents do not specify affected product/version or the exact root cause. The NVD entry lists CVSS v3.1 base score 4.3 (Medium) with confidentiality ...

EUVD-2026-57247

An authenticated user without repository read permission may access private NuGet metadata under specific conditions...

CVE-2026-66378 Authenticated users may access private NuGet metadata

An authenticated user without repository read permission may access private NuGet metadata under specific conditions...

CVE-2026-66378 Authenticated users may access private NuGet metadata

An authenticated user without repository read permission may access private NuGet metadata under specific conditions...

CVE-2026-66380 Authenticated users may access private OCI referrer metadata

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...