JFrog Artifactory

• CVE-2026-82329 Critical 9.8 Exploited Potential authentication bypass leading to administrative access in Artifactory 14.4%
• CVE-2026-42018 High 7.5 Exploited Anonymous user token generation exposure in JFrog Artifactory 10.0%
• CVE-2026-66384 Medium 5.3 Exploited Authenticated users may write data outside the intended Docker cache path 0.7%
• CVE-2026-42016 High 8.1 Exploited Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation 8.6%
• CVE-2026-70550 Medium 6.5 Potential unauthorized access to private Composer repository metadata in JFrog Artifactory 0.4%
• CVE-2026-70548 Low 3.5 SSRF In CocoaPods Via JFrog Artifactory External Dependency 0.3%
• CVE-2026-69104 High 7.6 Potential unauthorized repository migration in JFrog Artifactory 0.3%
• CVE-2026-70551 High 8.5 Server-Side Request Forgery Via VCS remote download in JFrog Artifactory 0.3%
• CVE-2026-69106 High 8.8 Potential cache poisoning in JFrog Artifactory 0.5%
• CVE-2026-69107 Medium 5.9 Potential unauthorized artifact access in JFrog Artifactory 0.4%
• CVE-2026-69105 High 8.1 Potential package cache integrity issue in JFrog Artifactory 0.2%
• CVE-2026-70547 Medium 4.3 Potential unauthorized metadata exposure in JFrog Artifactory 0.3%
• CVE-2026-66016 Medium 6.7 Rendered Artifactory Helm manifests may contain generated TLS private keys 0.1%
• CVE-2026-68759 High 7.2 Integration credential holders may impersonate users in JFrog Access 0.3%
• CVE-2026-65926 Low 3.1 Private Release Bundle versions may be disclosed under specific configurations 0.2%
• CVE-2026-68758 Medium 6.5 Authenticated users may access restricted Artifactory support information 0.4%
• CVE-2026-66375 High 8.1 Low-privilege users may remove protected Artifactory metadata 0.4%
• CVE-2026-68757 High 7.5 Potential improper SAML signature verification in JFrog Artifactory 0.3%
• CVE-2026-68756 Medium 6.6 Potential insecure deserialization in JFrog Artifactory 0.5%
• CVE-2026-66382 Medium 4.3 Authenticated users may write files outside the intended Artifactory work directory 0.4%
• CVE-2026-66381 Medium 5.3 Repository readers may access content outside configured upstream paths 0.4%
• CVE-2026-68760 Medium 5.3 Potential remember-me authentication bypass in JFrog Artifactory 0.5%
• CVE-2026-66379 Medium 4.3 Authenticated users may view private Puppet module metadata 0.3%
• CVE-2026-66378 Medium 4.3 Authenticated users may access private NuGet metadata 0.3%
• CVE-2026-66377 Medium 5.3 Anonymous users may access restricted Artifactory repository information 0.4%
• CVE-2026-68755 Medium 4.3 Bundle writers may alter trusted release information in JFrog Artifactory 0.3%
• CVE-2026-66380 Medium 4.3 Authenticated users may access private OCI referrer metadata 0.3%
• CVE-2026-68754 Medium 6.5 Publishers without delete permission can overwrite docker layer information 0.3%
• CVE-2026-68753 Medium 5.3 Anonymous users may access restricted Artifactory content under specific configurations 0.3%
• CVE-2026-66376 Medium 4.2 Deleted users may temporarily retain access to JFrog Artifactory 0.2%
• CVE-2026-68752 High 7.2 Project Resource Managers may escalate privileges in JFrog Artifactory 0.5%
• CVE-2026-65922 High 7.1 Potential unauthorized modification of Artifactory internal metadata 0.3%
• CVE-2026-65923 Medium 6.8 Potential server-side request forgery in Artifactory Ansible repository handling 0.3%
• CVE-2026-65617 High 8.8 Potential remote code execution on an Artifactory package service container. 0.6%
• CVE-2026-65924 Medium 6.5 Server-Side Request Forgery (SSRF) via Terraform Remote repository 0.4%
• CVE-2026-65925 Medium 6.5 Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository 0.4%
• CVE-2026-65616 High 8.8 Potential privilege escalation to JFrog administrator privileges 0.4%
• CVE-2026-66015 High 7.2 JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation. 0.6%
• CVE-2026-65618 Medium 6.5 Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability 0.4%
• CVE-2026-66018 Medium 6.5 JFrog Artifactory build environment properties exposure 0.4%
• CVE-2026-66014 High 8.8 Potential authentication bypass leading to privilege escalation in Artifactory 0.6%
• CVE-2026-65921 High 8.8 Potential path traversal leading to unauthorized file writes 0.6%
• CVE-2026-42017 High 8.8 Privilege escalation via JFrog Worker event token exposure 0.5%
• CVE-2024-6915 Critical 9.3 JFrog Artifactory Cache Poisoning 0.6%
• CVE-2024-2248 Medium 6.4 JFrog Artifactory Header Injection 0.3%
• CVE-2024-4142 Critical 9.0 JFrog Artifactory Improper input validation within token creation flow 0.7%
• CVE-2024-2247 High 8.8 JFrog Artifactory Cross-Site Scripting 0.5%
• CVE-2023-42509 Medium 6.6 JFrog Artifactory Sensitive Data Leakage in Repository configuration process 0.4%
• CVE-2023-42661 High 7.2 JFrog Artifactory Improper input validation leads to arbitrary file write 0.9%
• CVE-2023-42662 Critical 9.3 JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens 0.5%