CVE Tools
Sign in

CVE-2026-65617

Potential remote code execution on an Artifactory package service container.

Published: Jul 27, 2026Updated: Jul 30, 2026 Sources: CVE List NVDCWE-502
8.8HIGH
NVD MITRE
EPSS Score
0.6%
Top 55.0%
CISA KEV
Not in KEV
Exploits
No Known Exploits
Remediation
Patch Available
Self-Check
OpenVAS

Description

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions.

In plain language

AI Act now

CVE-2026-65617 is a serious JFrog Artifactory flaw that can let a low-privileged attacker run code over the network in certain package-repository situations—this is a RED risk and most businesses using Artifactory should act fast.

Executive summary

CVE-2026-65617 describes a deserialization flaw in JFrog Artifactory package handling that can enable remote code execution by a low-privileged attacker over the network when specific repository conditions are met; exploitation has been reported in a real incident.

If affected, business impact
Server takeoverStealing internal dataAltering or destroying packagesService disruption and downtime

What to do now

  1. Check whether your JFrog Artifactory version is older than the fixed releases (7.111.18, 7.117.25, 7.125.18, 7.133.27, 7.146.34, 7.161.15).
  2. If you are affected, upgrade Artifactory to a version listed as fixed in your supported release line.
  3. After upgrading, confirm the Artifactory service is running normally and that package/repository operations still behave as expected.
  4. If you cannot upgrade immediately, restrict network access to Artifactory to only required internal sources and deny inbound access from the internet where possible, while planning the fixed upgrade urgently.
Usually a quick update

CVSS Vector Breakdown

AV:NAC:LPR:LUI:NS:UC:HI:HA:H
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:LPrivileges Required
Low
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:HConfidentiality
High
I:HIntegrity
High
A:HAvailability
High
Open in CVSS calculator →

Weaknesses

CWE-502

Affected Products

jfrog
commercial·USaka artifactory self-hosted, jfrog artifactory
artifactoryMixed
DevTools & CI / artifact-registry

Exploitability

Official Patch Available
Is your org exposed to CVE-2026-65617?We can run the check for you — a free external exposure review, no install. Check my exposure

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

3 techniques
Execution
Initial Access
View detailed technique mapping

References

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
docs.jfrog.com
https://docs.jfrog.com/releases/docs/jfrog-security-advisories
docs.jfrog.com
News mentions
3

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2026-65617 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows