Skip to content
Jfrog vulnerabilities
Newest
-
jfrog jfrog-cli
Potential command execution on the host running JFrog CLI.
CVE-2026-92892
Fix available
9.0 Critical
-
jfrog artifactory
Potential authentication bypass leading to administrative access in Artifactory
CVE-2026-82329
In KEVPublic exploit
EPSS 14.4%
9.8 Critical
-
jfrog artifactory
Potential unauthorized access to private Composer repository metadata in JFrog Artifactory
CVE-2026-70550
6.5 Medium
-
jfrog artifactory
SSRF In CocoaPods Via JFrog Artifactory External Dependency
CVE-2026-70548
3.5 Low
-
jfrog artifactory
Potential unauthorized repository migration in JFrog Artifactory
CVE-2026-69104
7.6 High
-
jfrog artifactory
Server-Side Request Forgery Via VCS remote download in JFrog Artifactory
CVE-2026-70551
8.5 High
-
jfrog artifactory
Potential cache poisoning in JFrog Artifactory
CVE-2026-69106
8.8 High
-
jfrog artifactory
Anonymous user token generation exposure in JFrog Artifactory
CVE-2026-42018
In KEV
7.5 High
-
jfrog artifactory
Potential unauthorized artifact access in JFrog Artifactory
CVE-2026-69107
5.9 Medium
-
jfrog artifactory
Potential package cache integrity issue in JFrog Artifactory
CVE-2026-69105
8.1 High
-
jfrog artifactory
Potential unauthorized metadata exposure in JFrog Artifactory
CVE-2026-70547
4.3 Medium
-
jfrog artifactory
Rendered Artifactory Helm manifests may contain generated TLS private keys
CVE-2026-66016
6.7 Medium
-
jfrog artifactory
Integration credential holders may impersonate users in JFrog Access
CVE-2026-68759
7.2 High
-
jfrog artifactory
Private Release Bundle versions may be disclosed under specific configurations
CVE-2026-65926
3.1 Low
-
jfrog artifactory
Authenticated users may write data outside the intended Docker cache path
CVE-2026-66384
In KEVPublic exploit
5.3 Medium
-
jfrog artifactory
Authenticated users may access restricted Artifactory support information
CVE-2026-68758
6.5 Medium
-
jfrog artifactory
Low-privilege users may remove protected Artifactory metadata
CVE-2026-66375
8.1 High
-
jfrog artifactory
Potential improper SAML signature verification in JFrog Artifactory
CVE-2026-68757
7.5 High
-
jfrog artifactory
Potential insecure deserialization in JFrog Artifactory
CVE-2026-68756
6.6 Medium
-
jfrog artifactory
Authenticated users may write files outside the intended Artifactory work directory
CVE-2026-66382
4.3 Medium
-
jfrog artifactory
Repository readers may access content outside configured upstream paths
CVE-2026-66381
5.3 Medium
-
jfrog artifactory
Potential remember-me authentication bypass in JFrog Artifactory
CVE-2026-68760
5.3 Medium
-
jfrog artifactory
Authenticated users may view private Puppet module metadata
CVE-2026-66379
4.3 Medium
-
jfrog artifactory
Authenticated users may access private NuGet metadata
CVE-2026-66378
4.3 Medium
-
jfrog artifactory
Anonymous users may access restricted Artifactory repository information
CVE-2026-66377
5.3 Medium
-
jfrog artifactory
Bundle writers may alter trusted release information in JFrog Artifactory
CVE-2026-68755
4.3 Medium
-
jfrog artifactory
Authenticated users may access private OCI referrer metadata
CVE-2026-66380
4.3 Medium
-
jfrog artifactory
Publishers without delete permission can overwrite docker layer information
CVE-2026-68754
6.5 Medium
-
jfrog artifactory
Anonymous users may access restricted Artifactory content under specific configurations
CVE-2026-68753
5.3 Medium
-
jfrog artifactory
Deleted users may temporarily retain access to JFrog Artifactory
CVE-2026-66376
4.2 Medium
-
jfrog artifactory
Project Resource Managers may escalate privileges in JFrog Artifactory
CVE-2026-68752
7.2 High
-
jfrog artifactory
Potential unauthorized modification of Artifactory internal metadata
CVE-2026-65922
7.1 High
-
jfrog artifactory
Potential server-side request forgery in Artifactory Ansible repository handling
CVE-2026-65923
6.8 Medium
-
jfrog artifactory
Potential remote code execution on an Artifactory package service container.
CVE-2026-65617
8.8 High
-
jfrog artifactory
Server-Side Request Forgery (SSRF) via Terraform Remote repository
CVE-2026-65924
6.5 Medium
-
jfrog artifactory
Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository
CVE-2026-65925
6.5 Medium
-
jfrog artifactory
Potential privilege escalation to JFrog administrator privileges
CVE-2026-65616
Public exploit
8.8 High
-
jfrog artifactory
JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.
CVE-2026-66015
7.2 High
-
jfrog artifactory
Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability
CVE-2026-65618
6.5 Medium
-
jfrog artifactory
JFrog Artifactory build environment properties exposure
CVE-2026-66018
6.5 Medium
-
jfrog artifactory
Potential authentication bypass leading to privilege escalation in Artifactory
CVE-2026-66014
8.8 High
-
jfrog artifactory
Potential path traversal leading to unauthorized file writes
CVE-2026-65921
8.8 High
-
jfrog artifactory
Privilege escalation via JFrog Worker event token exposure
CVE-2026-42017
8.8 High
-
jfrog artifactory
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
CVE-2026-42016
In KEV
8.1 High
-
jfrog artifactory (workers)
JFrog Artifactory Cross-Site Scripting
CVE-2025-14830
4.9 Medium
-
jfrog artifactory
JFrog Artifactory Cache Poisoning
CVE-2024-6915
Fix available
9.3 Critical
-
jfrog artifactory
JFrog Artifactory Header Injection
CVE-2024-2248
Fix available
6.4 Medium
-
jfrog artifactory
JFrog Artifactory Improper input validation within token creation flow
CVE-2024-4142
Fix available
9.0 Critical
-
jfrog artifactory, artifactory self-hosted +1 more
JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users
CVE-2024-3505
Fix available
4.3 Medium
-
jfrog artifactory
JFrog Artifactory Cross-Site Scripting
CVE-2024-2247
Fix available
8.8 High
- Show olderLoading…