433 matches found
CVE-2026-69107
CVE-2026-69107 affects JFrog Artifactory. An unauthenticated user may access restricted artifacts under specific conditions. The CVSS v3.1 base score is 5.9 (MEDIUM), with Network attack vector, high attack complexity, no privileges required, and no user interaction. Impact is confidentiality los...
CVE-2026-69105
CVE-2026-69105 describes an unauthenticated issue affecting JFrog Artifactory where, under specific conditions, untrusted package content can be cached, potentially compromising artifact integrity and availability. The connected sources (NVD, CVE List) reiterate that an unauthenticated attacker c...
CVE-2026-69105 Potential package cache integrity issue in JFrog Artifactory
An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability...
CVE-2026-70547 Potential unauthorized metadata exposure in JFrog Artifactory
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-70547
Technical details about CVE-2026-70547 are not publicly available in the provided documents. Monitor for updates from official advisories before drawing conclusions on impact, affected products, or remediation.
CVE-2026-68756
A party with write access to stored session data may affect JFrog Artifactory under specific conditions...
CVE-2026-68759
Technical details about CVE-2026-68759 are not publicly available in the provided documents. The descriptions only state impersonation is possible for credential holders; no affected products, versions, root cause, or fixes are disclosed. Monitor for updates.
CVE-2026-68759 Integration credential holders may impersonate users in JFrog Access
A holder of a valid integration credential may impersonate other users under specific conditions...
CVE-2026-65926
An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known...
CVE-2026-68757 Potential improper SAML signature verification in JFrog Artifactory
A user with access to a valid SAML response may impersonate another user under specific conditions...
CVE-2026-68757
CVE-2026-68757 concerns JFrog Artifactory where a user with a valid SAML response may impersonate another user due to a potential improper SAML signature verification. The connected documents corroborate the basic vulnerability description and label it in CVE lists as a potential SAML-signature-v...
EUVD-2026-57252
A party with write access to stored session data may affect JFrog Artifactory under specific conditions...
CVE-2026-68756 Potential insecure deserialization in JFrog Artifactory
A party with write access to stored session data may affect JFrog Artifactory under specific conditions...
CVE-2026-68756
CVE-2026-68756 concerns a potential insecure deserialization in JFrog Artifactory. The CVE records indicate that a party with write access to stored session data may affect Artifactory under specific conditions. Connected sources (CVELIST) label the issue as potential insecure deserialization; no...
CVE-2026-66382
Technical details for CVE-2026-66382 are not publicly available in the provided documents. Monitor official advisories for updates.
CVE-2026-68760
CVE-2026-68760 affects JFrog Artifactory (per CVE listings) with an unauthenticated bypass of authentication under specific cache conditions. The connected documents identify a remember-me authentication bypass scenario but do not specify affected versions, vulnerable component paths, root cause ...
CVE-2026-68760 Potential remember-me authentication bypass in JFrog Artifactory
An unauthenticated user may bypass authentication under specific cache conditions...
CVE-2026-68755 Bundle writers may alter trusted release information in JFrog Artifactory
A bundle writer may create misleading release promotion information under specific conditions...
CVE-2026-68755
This CVE concerns Artifactory where a bundle writer may alter or create misleading release promotion information under certain conditions. The connected records identify Artifactory’s bundle writer as the affected component, with the underlying issue described as producing misleading release info...