CVE-2026-69105 Potential package cache integrity issue in JFrog Artifactory

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability...

CVE-2026-69105

CVE-2026-69105 describes an unauthenticated issue affecting JFrog Artifactory where, under specific conditions, untrusted package content can be cached, potentially compromising artifact integrity and availability. The connected sources (NVD, CVE List) reiterate that an unauthenticated attacker c...

CVE-2026-68760

An unauthenticated user may bypass authentication under specific cache conditions...

CVE-2026-66381

A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions...

CVE-2026-66384

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...

EUVD-2026-57256

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...

CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...

CVE-2026-66384

JFrog Artifactory is affected by an improper limitation of a pathname to a restricted directory , allowing an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions. The vulnerability carries a CVSS score of 5.3 (MEDIUM) with high integ...

CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...

EUVD-2026-57250

A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions...

CVE-2026-66381 Repository readers may access content outside configured upstream paths

A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions...

CVE-2026-66381 Repository readers may access content outside configured upstream paths

A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions...

CVE-2026-66381

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-68760

CVE-2026-68760 affects JFrog Artifactory (per CVE listings) with an unauthenticated bypass of authentication under specific cache conditions. The connected documents identify a remember-me authentication bypass scenario but do not specify affected versions, vulnerable component paths, root cause ...

CVE-2026-68760 Potential remember-me authentication bypass in JFrog Artifactory

An unauthenticated user may bypass authentication under specific cache conditions...

EUVD-2026-57249

An unauthenticated user may bypass authentication under specific cache conditions...

CVE-2026-68760 Potential remember-me authentication bypass in JFrog Artifactory

An unauthenticated user may bypass authentication under specific cache conditions...

EUVD-2026-57237

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's ImageProxy in server/lib/imageproxy.ts uses the upstream ETag and Content-Type response headers to build a cache filename for the unauthenticated GET...

CVE-2026-73291 Seerr: Path traversal to RCE via /avatarproxy image cache filename from upstream ETag

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's ImageProxy in server/lib/imageproxy.ts uses the upstream ETag and Content-Type response headers to build a cache filename for the unauthenticated GET...

CVE-2026-73291 Seerr: Path traversal to RCE via /avatarproxy image cache filename from upstream ETag

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's ImageProxy in server/lib/imageproxy.ts uses the upstream ETag and Content-Type response headers to build a cache filename for the unauthenticated GET...