572 matches found
CVE-2026-69105 Potential package cache integrity issue in JFrog Artifactory
An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability...
CVE-2026-70547 Potential unauthorized metadata exposure in JFrog Artifactory
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-70547
Technical details about CVE-2026-70547 are not publicly available in the provided documents. Monitor for updates from official advisories before drawing conclusions on impact, affected products, or remediation.
CVE-2026-68756
A party with write access to stored session data may affect JFrog Artifactory under specific conditions...
CVE-2026-68753
An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way...
CVE-2026-66382
An authenticated user may write files outside the intended Artifactory work directory under specific conditions...
CVE-2026-66016
CVE-2026-66016 concerns rendered Artifactory Helm manifests produced under specific self-hosted Helm configurations, where generated TLS private keys may be retained and become accessible to highly privileged local users. The CVSS-derived metrics in the initial entry indicate local attack vector,...
CVE-2026-66016 Rendered Artifactory Helm manifests may contain generated TLS private keys
Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...
CVE-2026-65926
An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known...
CVE-2026-65926
Technical details (affected product/versions/exploitability) are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and trusted sources.
CVE-2026-68758
Technical details about CVE-2026-68758 are not publicly available in the provided documents; no affected products, versions, root cause, or remediation are specified. Monitor for updates.
CVE-2026-68758 Authenticated users may access restricted Artifactory support information
A low-privileged authenticated user may access restricted support information under specific conditions...
CVE-2026-66375 Low-privilege users may remove protected Artifactory metadata
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...
CVE-2026-66375
CVE-2026-66375 concerns JFrog Artifactory metadata : a low-privilege authenticated user can permanently remove protected internal metadata across repositories under specific conditions. The issue is described across multiple sources (NVD, CVE Registry) with related CVSS 3.1 data: AV:N/AC:L/PR:L/U...
CVE-2026-68757 Potential improper SAML signature verification in JFrog Artifactory
A user with access to a valid SAML response may impersonate another user under specific conditions...
CVE-2026-68757
CVE-2026-68757 concerns JFrog Artifactory where a user with a valid SAML response may impersonate another user due to a potential improper SAML signature verification. The connected documents corroborate the basic vulnerability description and label it in CVE lists as a potential SAML-signature-v...
EUVD-2026-57252
A party with write access to stored session data may affect JFrog Artifactory under specific conditions...
CVE-2026-68756 Potential insecure deserialization in JFrog Artifactory
A party with write access to stored session data may affect JFrog Artifactory under specific conditions...
CVE-2026-68756
CVE-2026-68756 concerns a potential insecure deserialization in JFrog Artifactory. The CVE records indicate that a party with write access to stored session data may affect Artifactory under specific conditions. Connected sources (CVELIST) label the issue as potential insecure deserialization; no...