jfrog

Top products

The 15 most recently published vulnerabilities affecting jfrog.

• CVE-2026-69106Potential cache poisoning in JFrog Artifactory8.8Aug 12, 2026
• CVE-2026-42018Anonymous user token generation exposure in JFrog Artifactory7.5Aug 12, 2026
• CVE-2026-69107Potential unauthorized artifact access in JFrog Artifactory5.9Aug 12, 2026
• CVE-2026-69105Potential package cache integrity issue in JFrog Artifactory8.1Aug 12, 2026
• CVE-2026-70547Potential unauthorized metadata exposure in JFrog Artifactory4.3Aug 12, 2026
• CVE-2026-66016Rendered Artifactory Helm manifests may contain generated TLS private keys6.7Aug 12, 2026
• CVE-2026-68759Integration credential holders may impersonate users in JFrog Access7.2Aug 12, 2026
• CVE-2026-65926Private Release Bundle versions may be disclosed under specific configurations3.1Aug 12, 2026
• CVE-2026-66384Authenticated users may write data outside the intended Docker cache path5.3Aug 12, 2026
• CVE-2026-68758Authenticated users may access restricted Artifactory support information6.5Aug 12, 2026
• CVE-2026-66375Low-privilege users may remove protected Artifactory metadata8.1Aug 12, 2026
• CVE-2026-68757Potential improper SAML signature verification in JFrog Artifactory7.5Aug 12, 2026
• CVE-2026-68756Potential insecure deserialization in JFrog Artifactory6.6Aug 12, 2026
• CVE-2026-66382Authenticated users may write files outside the intended Artifactory work directory4.3Aug 12, 2026
• CVE-2026-66381Repository readers may access content outside configured upstream paths5.3Aug 12, 2026