433 matches found
CVE-2026-69104
JFrog Artifactory (self-managed) is affected by an insufficient permission enforcement flaw in repository migration operations . An authenticated user with low privileges can initiate migration operations on repositories for which they lack the required permissions, potentially leading to informa...
CVE-2026-70551
CVE-2026-70551 is a Server-Side Request Forgery (SSRF) vulnerability in JFrog Artifactory via VCS remote download. A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL , redirecting the server's request to an attacker-controlle...
CVE-2026-70551 Server-Side Request Forgery Via VCS remote download in JFrog Artifactory
A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL...
[SECURITY] Fedora 44 Update: jfrog-cli-2.120.0-1.fc44
JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...
Fedora 44 : jfrog-cli (2026-39186e6ecd)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-39186e6ecd advisory. Update to 2.120. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
[SECURITY] Fedora 44 Update: jfrog-cli-2.119.0-1.fc44
JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...
Fedora 44 : jfrog-cli (2026-9f70b173c8)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9f70b173c8 advisory. Update to 2.119.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: kube-arangodb, gitlab-operator, kyverno-notation-aws-fips, gogatekeeper, ratify-fips, rancher-fleet, helm-operator-fips, cert-manager-cmctl, consul-k8s-fips, ratify, jfrog-cli, teleport, conftest, falcoctl-fips, crossplane, rancher-helm, falcoctl, gatekeeper,...
CVE-2026-42018
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources...
CVE-2026-69106 Potential cache poisoning in JFrog Artifactory
A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...
CVE-2026-69106
The CVE-2026-69106 entry concerns JFrog Artifactory (self-managed releases). A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content. The NVD/CVE records confirm this as a high-severity issue (CVSS v3.1 base ...
CVE-2026-69106 Potential cache poisoning in JFrog Artifactory
A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...
EUVD-2026-57388
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources...
CVE-2026-42018
JFrog Artifactory is affected by CVE-2026-42018, where an unauthenticated caller could receive an internal anonymous-user token when anonymous access is disabled, potentially exposing sensitive resources. This aligns with the provided CVSSv3.1 base score of 7.5 (HIGH) with network attack vector a...
CVE-2026-42018 Anonymous user token generation exposure in JFrog Artifactory
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources...
CVE-2026-42018 Anonymous user token generation exposure in JFrog Artifactory
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources...
CVE-2026-69107
An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions...
EUVD-2026-57319
An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions...
