Total
70 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-68752 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 7.2 HIGH |
| A Project Resource Manager may gain broader administrative privileges under specific conditions. | |||||
| CVE-2026-68754 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 6.5 MEDIUM |
| A repository publisher without delete permission may modify protected package content under specific conditions. | |||||
| CVE-2026-66381 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 5.3 MEDIUM |
| A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions. | |||||
| CVE-2026-66379 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 4.3 MEDIUM |
| An authenticated user may view private Puppet module metadata without repository read access. | |||||
| CVE-2026-68758 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 6.5 MEDIUM |
| A low-privileged authenticated user may access restricted support information under specific conditions. | |||||
| CVE-2026-68755 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 4.3 MEDIUM |
| A bundle writer may create misleading release promotion information under specific conditions. | |||||
| CVE-2026-68760 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 5.3 MEDIUM |
| An unauthenticated user may bypass authentication under specific cache conditions. | |||||
| CVE-2026-68756 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 6.6 MEDIUM |
| A party with write access to stored session data may affect JFrog Artifactory under specific conditions. | |||||
| CVE-2026-66375 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 8.1 HIGH |
| A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions. | |||||
| CVE-2026-66384 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 5.3 MEDIUM |
| An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions. | |||||
| CVE-2026-68757 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 7.5 HIGH |
| A user with access to a valid SAML response may impersonate another user under specific conditions. | |||||
| CVE-2026-69107 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 5.9 MEDIUM |
| An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions. | |||||
| CVE-2026-66376 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 4.2 MEDIUM |
| Credentials for a deleted user may remain valid for a short period under specific conditions. | |||||
| CVE-2026-66378 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 4.3 MEDIUM |
| An authenticated user without repository read permission may access private NuGet metadata under specific conditions. | |||||
| CVE-2026-66382 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 4.3 MEDIUM |
| An authenticated user may write files outside the intended Artifactory work directory under specific conditions. | |||||
| CVE-2026-66380 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 4.3 MEDIUM |
| An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions. | |||||
| CVE-2026-66377 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 5.3 MEDIUM |
| An unauthenticated user may access restricted repository information under specific conditions. | |||||
| CVE-2026-66016 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 6.7 MEDIUM |
| Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users. | |||||
| CVE-2026-69105 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 8.1 HIGH |
| An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability. | |||||
| CVE-2026-68759 | 1 Jfrog | 1 Artifactory | 2026-10-24 | N/A | 7.2 HIGH |
| A holder of a valid integration credential may impersonate other users under specific conditions. | |||||