CVE-2026-65617

Technical details (affected component, exact root cause, affected versions, exploitability) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-65617 Potential remote code execution on an Artifactory package service container.

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...

Xxe

An XML external entity XXE vulnerability in Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 allows remote authenticated users to read arbitrary files via crafted XML inside an imported package configuration .ZIP file within the Kofax/KFS/Admin/PackageService/package/uploa...

Puppet Server Contention Condition Vulnerability

Puppet is IT automation software that helps system administrators manage their infrastructure. A contention condition vulnerability exists in Puppet Server 0.2.0 that allows local users to obtain sensitive information by accessing the package installation or upgrade service...