SQL injection in Winter CMS Backend Filter widget (versions <= 1.2.12) allows authenticated backend users to read arbitrary database contents by submitting crafted AJAX requests to the `numberrange` filter scope handler. Exploitation requires a third-party plugin to have registered a `numberrange` filter scope with the `conditions` configuration key - no built-in Winter CMS views use this combination, making vanilla installations unexploitable. The fix is confirmed in v1.2.13 via GitHub Advisory GHSA-m7jc-g4rc-jmvh; no public exploit code or active exploitation has been identified at time of analysis.
Credential interception in Red Hat Multicluster Engine for Kubernetes (MCE) exposes newly rotated provider credentials through an authorization bypass in the provider-credential-controller component. An attacker with specific hub cluster permissions and prior knowledge of a credential value can manipulate `copiedFrom` labels to hijack the credential rotation process, gaining unauthorized read access to sensitive credentials scoped across managed clusters. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the high confidentiality impact and cross-cluster scope change make this a meaningful risk in mixed-trust MCE deployments.
TLS certificate verification bypass in Kong Mesh's kuma-dp data plane component exposes authentication tokens to on-path interception in Universal mode deployments lacking explicit CA certificate configuration. An adjacent attacker who can position themselves between the data plane and control plane can intercept the dataplane authentication token, impersonate the control plane, inject a forged bootstrap configuration, and fully take over the Envoy proxy. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, but the high subsequent-system impact (SC:H/SI:H/SA:H in CVSS 4.0) underscores the severity for affected Universal mode deployments. Vendor-confirmed patches are available across four release branches.
Docker Sandboxes (sbx) fails to enforce read-only semantics on virtio-fs host mounts: the in-guest bind correctly receives the read-only flag, but the underlying host-edge grant omitted from the policy-share allowlist carries no access mode, leaving the shared-export path fully writable at the host level. Low-privileged code executing inside the sandbox can enumerate or derive the virtio-fs export path and write to host directories the operator explicitly attached as read-only, breaking the isolation guarantee that is the product's core security promise. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
IBM Db2 on Linux, UNIX, and Windows exposes cleartext database passwords by writing them into diagnostic trace files, affecting versions 11.5.0-11.5.9 and 12.1.0-12.1.5, including DB2 Connect Server. Any low-privilege local OS user with read access to the Db2 trace directory can harvest plaintext credentials without requiring database-level authentication or elevated system rights. IBM has released a patch; no active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
Use-After-Free vulnerabilities in the GNU linker (ld) component of binutils crash the linker process when processing crafted object or archive files during LTO-enabled linking on Red Hat Enterprise Linux systems. The flaws exist at three distinct dereference points in add_archive_element() in ld/ldmain.c, where plugin_maybe_claim() frees the BFD object but the caller retains dangling pointers that are subsequently accessed. The attack surface is confined to build-time environments, with the primary realistic threat being a supply chain attack introducing a malicious object file into CI/CD pipelines or developer build systems; no public exploit code or active exploitation has been confirmed at time of analysis.
The Autodesk Installer IPC frame parser fails to properly validate attacker-controlled position and offset fields (CWE-1285), allowing a locally authenticated low-privileged user to trigger an out-of-range substring operation that crashes the NT AUTHORITY\SYSTEM service. Affected scope covers all tracked versions per the wildcard CPE string, and Autodesk has confirmed and patched the issue via advisory ADSK-SA-2026-0013. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
TLS certificate verification is silently disabled in the kumactl CLI (Kong Mesh / Kuma) when an operator registers an HTTPS control plane profile without specifying a CA certificate via --ca-cert-file, causing API tokens to traverse the connection without server identity validation. A network-adjacent attacker capable of intercepting traffic between the operator's workstation and the control plane can steal user or administrator API tokens and subsequently issue arbitrary authenticated commands against the control plane. No active exploitation confirmed (not in CISA KEV) and no public exploit code has been identified; patch versions are confirmed by the vendor advisory GHSA-v95x-xhq5-4929.
Unsafe deserialization in Apache Airflow's XCom REST API allows an authenticated user with XCom write-and-read access to instantiate arbitrary `airflow.*` classes on the API server by smuggling reserved serialization keys inside JSON string literals. The `_check_forbidden_xcom_keys` guard inspected `dict`, `list`, and `tuple` types but did not attempt to JSON-decode `str` values, so a payload like `json.dumps({"__classname__": "airflow.sdk.definitions.connection.Connection"})` passed the write-time check and was later reconstructed into a live Python object when read back via `?deserialize=true`. No public exploit has been identified at time of analysis; vendor-released patch is available in apache-airflow 3.3.1.
Cross-site scripting in IBM i 7.3 through 7.6 allows a remote authenticated attacker to inject and execute arbitrary JavaScript in the browser context of another user by exploiting improper neutralization of user-controlled input in a web interface component. The CVSS Scope:Changed (S:C) metric confirms the XSS payload escapes the IBM i application and executes in the victim's browser, enabling session hijacking, credential theft, or unauthorized page manipulation. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a remediation via vendor advisory.
Cross-team credential access in Apache Airflow before 3.3.1 allows authenticated members of one team to invoke another team's Connection credentials through the POST /api/v2/connections/test API endpoint, exploiting a broken namespace-isolation guard in the environment-variable secrets backend. The flaw-confirmed by Apache with patches in PRs #70736 and #70902-combines a guard that only triggered on unscoped (global) requests with a regex incapable of matching team names containing underscores, even though underscores are explicitly permitted in Airflow team name validation. Exploitation requires a precise configuration alignment of multi_team mode, an explicitly enabled test_connection endpoint, and environment-variable-provisioned team secrets; no public exploit has been identified at time of analysis.
Authorization bypass in RustFS FTPS MKD handler allows authenticated FTPS users to create S3 buckets in violation of enforced IAM-style policies. All RustFS releases prior to 1.0.0-beta.12 are affected via the `FtpsDriver::mkd` function in `crates/protocols/src/ftps/driver.rs`, which calls `storage.create_bucket` without invoking `authorize_operation` for `S3Action::CreateBucket`. No public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis.
Stored cross-site scripting in IBM i versions 7.3 through 7.6 allows an authenticated low-privileged user to inject persistent JavaScript into the Web UI, executing it in other users' browser sessions within the same trusted environment. The Scope:Changed CVSS metric confirms the payload crosses session boundaries, enabling credential theft or session hijacking against other authenticated users. IBM has released a patch via advisory node/7283292; no public exploit code or active exploitation has been identified at time of analysis.
Insufficient session expiration in JFrog Artifactory (all versions per CPE wildcard) permits an attacker who holds valid credentials for a recently deleted user account to continue authenticating for a brief window after account removal. Classified under CWE-613, the flaw arises from credential invalidation logic that does not immediately propagate account deletion state under specific triggering conditions, leaving a short-lived but exploitable gap. No public exploit code has been identified and the vulnerability is absent from the CISA KEV catalog, but the network-accessible vector means any party with knowledge of the deleted account's credentials could attempt opportunistic access during this window.
Denial-of-service risk in Fortinet FortiOS across five major version branches (6.4.x through 7.6.6) stems from unbounded resource allocation (CWE-770), allowing unauthenticated remote attackers to degrade availability of affected network appliances. The CVSS temporal metric E:P confirms proof-of-concept exploit code exists, and an official patch is available per Fortinet PSIRT advisory FG-IR-26-162. No active exploitation is confirmed in CISA KEV at time of analysis, but the broad version coverage and perimeter-facing nature of FortiOS appliances elevate practical risk.
SQL LIKE wildcard injection in phpMyFAQ's chat user search endpoint (GET /api/chat/users?q=) allows any authenticated user to bypass the intended display-name filter and enumerate all active user accounts. The vulnerability exists because the Chat::searchUsers() method applies database escape() to prevent SQL string breakout but omits escaping of the LIKE metacharacters % and _, which the database engine still interprets as wildcards. A PoC is publicly available demonstrating full user enumeration via q=%25%25 and q=__; no KEV listing exists at time of analysis.
Authentication bypass in JFrog Artifactory exposes protected repository resources to unauthenticated remote users when specific cache conditions are met. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no credentials, no user interaction, and no special network position - any user who can reach the Artifactory instance over the network can potentially trigger this condition. No public exploit code exists and this CVE is not listed in the CISA KEV catalog at time of analysis, but the unauthenticated network attack vector elevates real-world concern for internet-facing deployments.
Unauthenticated access control bypass in Fortinet FortiWeb - spanning the 7.0 line through 8.0.2 - and multiple FortiOS branches stems from an incomplete list of disallowed inputs (CWE-184), allowing remote attackers to circumvent input-filtering enforcement and achieve unauthorized integrity modifications. The vulnerability extends to FortiOS, implicating shared blocklist logic across Fortinet's platform stack according to EUVD-2026-57192 and CPE data. Publicly available exploit code exists (CVSS temporal E:P), an official fix has been released (RL:O/RC:C), and no active exploitation has been confirmed in the CISA KEV catalog at time of analysis.
Path traversal in JFrog Artifactory exposes arbitrary repository content to low-privileged users holding the cache-deploy permission under specific, unspecified triggering conditions. An authenticated repository reader with cache-deploy rights can read artifacts outside the configured upstream path boundary, potentially accessing sensitive build artifacts, credentials embedded in packages, or proprietary code across repository namespaces they should not reach. No public exploit code exists and no CISA KEV listing is present, but the CVSS confidentiality impact is rated High, making this significant in multi-tenant or shared Artifactory deployments.
Inconsistent authorization enforcement in Vulnerability-Lookup's SSE streaming interface allows self-registered but unconfirmed or inactive accounts to subscribe to Pub/Sub event streams, accessing pre-moderation data that the REST API correctly restricts. The platform's self-registration flow issues an API key before account confirmation is complete, and the token_required decorator on /pubsub/subscribe/<topic> validated only that the key matched a known user - not that the account was active or confirmed. No public exploit has been identified at time of analysis, and a vendor-released patch correcting the authorization gap is confirmed available via upstream commit.
Unauthenticated exposure of Envoy admin data in kuma-dp (Kong Mesh data plane) allows any pod on the Kubernetes cluster network to retrieve internal service mesh configuration without credentials. The readiness service on TCP port 9902, bound to all interfaces, acted as an unprotected reverse proxy forwarding nearly all Envoy admin read endpoints - including config dumps, cluster and listener lists, stats, and the mesh trust bundle - to any adjacent network caller. No public exploit code or CISA KEV listing exists at time of analysis; exploitation is bounded by the adjacent network prerequisite, but the risk is elevated in multi-tenant clusters where untrusted pods share the pod network.
Denial-of-service in Kong Mesh's kuma-cp control plane allows unauthenticated network-adjacent attackers to crash the entire control plane process by submitting a JWT token whose kid header is a JSON number instead of a string. Because the Go runtime panics on the unchecked type assertion before any signature, claims, or authorization logic executes, the crash takes down kuma-cp's HTTP API, health and readiness endpoints, and xDS simultaneously. No public exploit has been identified at time of analysis, but the attack is trivially reproducible from the PR diff; sustained availability loss requires repeated requests since the process will restart.
Unauthorized repository information disclosure in JFrog Artifactory allows unauthenticated remote users to read restricted repository content under specific deployment conditions. Rooted in CWE-862 (Missing Authorization), the flaw bypasses access controls without credentials, confirmed by a PR:N/AV:N CVSS vector. No public exploit code and no CISA KEV listing exist at time of analysis, and the 'specific conditions' qualifier in the vendor's own description limits the realistic attack surface compared to the raw CVSS score suggests.
Object version metadata exposure in RustFS allows anonymous HTTP clients to enumerate all stored object versions via GET /<bucket>?versions= even after an operator enables RestrictPublicBuckets. The authorization fallback in rustfs/src/storage/access.rs grants listing through an s3:ListBucket check but returns before applying the public-access block controls, silently contradicting the operator's intent to restrict anonymous access. No public exploit has been identified and the vulnerability is not listed in CISA KEV; the vendor-released fix is available in 1.0.0-beta.12.
Unauthorized read access to restricted JFrog Artifactory content is possible when a credentialed remote repository is configured in a specific non-default manner, triggering a missing authorization check (CWE-862). The flaw affects all Artifactory versions per the CPE wildcard, exposing proprietary artifacts such as internal libraries, Docker images, or build dependencies to network-accessible requests without credential validation. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the high confidentiality impact (C:H in CVSS) means successful exploitation results in full read exposure of the targeted restricted repository.
IBM i versions 7.3 through 7.6 expose sensitive information to remote authenticated attackers via a race condition (CWE-362). The flaw allows a low-privileged network-authenticated user to read data outside their authorization boundary during a timing window in an undisclosed subsystem. Vendor-released patch is available; no public exploit code exists and the vulnerability is not listed in CISA KEV.
Insecure Direct Object Reference (IDOR) in CERT/CC's VINCE coordination platform allows an authenticated vendor admin to manipulate or read notification configuration for contacts belonging to other vendors. The ModifyEmailNotifications view in vinny/views.py resolves a VinceCommEmail record by raw primary key supplied in the URL without verifying that the targeted record belongs to the requesting admin's own vendor group, enabling unauthorized cross-tenant read and write of email routing settings. No public exploit has been identified and EPSS is negligible (0.15%), but the flaw undermines the trust isolation between vendor tenants in a vulnerability coordination context.
Improper origin validation in the TP-Link TL-WR820N V2 router's web management interface allows adjacent unauthenticated attackers to extract device configuration details and sensitive information by sending HTTP requests with an absent or empty Referer header. The router relies on the HTTP Referer header as a request legitimacy check, but fails to enforce its presence or value consistently, allowing the validation to be trivially bypassed. No public exploit or active exploitation has been identified at time of analysis, though the attack requires only network adjacency and no credentials.
Reflected cross-site scripting in Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 allows unauthenticated remote attackers to execute arbitrary JavaScript in the browser of an authenticated victim. The injection point is the NagFormId parameter in cmd.cgi, which is insufficiently sanitized before being reflected in server responses. No public exploit or active exploitation has been identified at time of analysis, but the low attack complexity and zero-privilege requirement for the attacker make phishing-style delivery straightforward against administrators of these monitoring platforms.
Server-side request forgery in Vulnerability-Lookup's remote-instance synchronization feature enables an authenticated administrator holding the admin:access permission to pivot HTTP requests through the application server's network context. By registering a remote instance whose address resolves to a loopback, private, link-local, or cloud metadata endpoint - or by using a public URL that redirects to such a destination - the attacker causes the background sync worker to issue HTTP GET requests from the server's own network position, potentially exposing internal services or cloud instance metadata credentials. No public exploit has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog; a patch is available as an upstream commit from CIRCL.
Kong Mesh's control plane (kuma-cp) exposes the admin bootstrap token and JWT signing keys to any malicious webpage visited by an operator while the control plane is browser-reachable, due to two compounding default misconfigurations. The default CORS wildcard (`CorsAllowedDomains: [".*"]`) reflects any attacker-controlled `Origin` header, and the default `LocalhostIsAdmin: true` promotes loopback-sourced browser requests to `mesh-system:admin` without credential validation - a cross-origin `fetch()` from an attacker page is sufficient to receive full administrative credentials. This affects kuma-cp versions prior to 2.7.25, 2.9.15, 2.11.13, and 2.12.10; no public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Stored XSS in Craft CMS's control panel allows a low-privilege author to execute arbitrary JavaScript in an administrator's authenticated session by injecting a malicious payload into a draft name, which is rendered without HTML encoding in element chips and cards. All Craft CMS installations running versions 5.0.0-RC1 through 5.10.8 (exclusive) are affected. An attacker who can create element drafts can harvest the administrator's CSRF token and issue privileged control-panel actions - including creating new administrator accounts - without the victim taking any action beyond routine browsing of element indexes or relation fields. No public exploit identified at time of analysis, though the vendor's GHSA advisory verified the account-creation impact end-to-end.
Cross-site request forgery in Astro 7.0.0-7.0.5 allows unauthenticated network attackers to trigger state-mutating Actions and on-demand page endpoints using a victim's session cookies when the composable `astro/hono` pipeline is configured with `actions()` or `pages()` mounted without a preceding `middleware()` call. The default non-composable `astro()` pipeline is entirely unaffected; only deployments following the vulnerable pipeline composition pattern - which was demonstrated in the official `examples/advanced-routing` example and Cloudflare Hono documentation - are exposed. The attack is blind write-only: the attacker can mutate server state but cannot read the cross-origin response body. No public exploit or CISA KEV listing exists at time of analysis; the issue is fixed in Astro 7.0.6.
DOM-based cross-site scripting in Nagios Core (before 4.5.14) and Nagios XI (before 2026R1.7) allows an authenticated low-privileged attacker to execute arbitrary JavaScript in the browser of any user who views pages rendered by the vulnerable jsonquery.js component. The flaw is stored rather than reflected, meaning injected payloads persist server-side and activate without requiring a victim to follow a crafted link. No CISA KEV listing and no public exploit code have been identified at time of analysis; the vendor has released patches for both product lines.
Remote authenticated exploitation of a race condition in IBM i 7.3 through 7.6 allows attackers with low-privilege credentials to obtain sensitive information and bypass platform security restrictions. The CVSS vector (AV:N/AC:L/PR:L/UI:N) indicates the flaw is reachable over the network without user interaction, though authentication is required. No public exploit code or CISA KEV listing has been identified at time of analysis; IBM has released a patch via its support portal.
Stored cross-site scripting in Ultimate POS (Stock Management & Point of Sale) version 7.2 and earlier enables low-privileged authenticated attackers to compromise higher-privileged user sessions by injecting script payloads into the first-name field at account creation time. When the attacker submits a leave request through the HRM/Leave module, the unsanitized first-name payload is rendered in the leave-application notification pane of any administrator or manager who views it, executing within the admin browser origin and enabling session theft or unauthorized administrative actions. A researcher-published proof-of-concept is publicly available; no CISA KEV listing has been confirmed at time of analysis.
SVG href attribute bypass in Loofah prior to 2.25.2 allows a crafted sanitized SVG to reference arbitrary same-origin external documents, defeating the HTML5 sanitizer's local-reference restriction. Applications accepting user-supplied SVG content and rendering it to other users are directly affected: SVG use elements can load and render same-origin external SVG containing scripts, while feImage elements can silently fetch external images for tracking. No public exploit or CISA KEV listing exists at time of analysis, but the bypass technique is straightforward and publicly disclosed via the GHSA advisory and PR diff.
CryptoPro Secure Disk for BitLocker versions before v7.7.4 leaks TPM2.0 unsealing secrets by persisting them in a serialized binary format within unused disk sectors - raw storage areas that survive reboots and are accessible without operating system authentication. An unauthenticated attacker with physical access to the drive can image these sectors, extract the serialized secrets, and reconstruct a compatible TPM environment to unseal the BitLocker volume, effectively defeating the hardware-backed disk encryption the product is designed to enforce. No public exploit code has been identified at time of analysis; CISA SSVC rates exploitation as 'none', but the attack's low complexity once physical access is obtained was detailed publicly in a Black Hat USA 2026 research presentation, materially lowering the skill barrier for motivated actors.
Path traversal in IBM i 7.3 through 7.6 enables remote authenticated attackers to read sensitive files outside authorized directory boundaries by supplying crafted path strings that the platform fails to properly validate (CWE-22). Impact is limited to confidentiality - no integrity or availability exposure - and exploitation requires prior authentication. A vendor-released patch is available via IBM's support portal, and no public exploit code has been identified at time of analysis.
Parameter injection in IBM i 7.3 through 7.6 allows remote authenticated attackers to append unexpected parameters to system commands, with a vendor-confirmed availability impact. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) places this at Medium severity, requiring only valid credentials and network access with no user interaction. No public exploit code or active exploitation has been identified at time of analysis, and a vendor patch is available.
Sensitive values stored as deeply nested lists, tuples, or sets in Apache Airflow Variables are displayed unmasked in the Variables UI due to a recursion-depth logic error in the secrets masker. This is an incomplete-fix follow-up to CVE-2026-42358: that prior fix made dictionary traversal unbounded but left list/tuple/set structures subject to the depth cutoff, allowing values beyond that depth to appear in plaintext on screen. The practical impact is narrow - any authenticated user who can see the Variable in the UI already has read access to the full value through the Variables REST API - making this a shoulder-surfing defense gap rather than an access-control bypass. No public exploit has been identified at time of analysis.
Path traversal in JFrog Artifactory permits authenticated low-privilege users to write files outside the intended working directory under specific conditions. Reported directly by JFrog, this CWE-22 flaw carries a CVSS 3.1 score of 4.3 (Medium), reflecting network reachability with limited integrity impact and no confidentiality or availability exposure. No public exploit code has been identified at time of analysis, and this CVE does not appear in CISA KEV.
Improper authorization in IBM i versions 7.3 through 7.6 allows remote authenticated attackers to bypass security restrictions and perform unauthorized write operations on protected objects or data. The flaw, rooted in CWE-285, requires only low-privilege credentials and no user interaction, making it accessible to any authenticated user on the platform. IBM has released patches via their support advisory, and no active exploitation or public proof-of-concept has been identified at time of analysis.
SQL injection in IBM i 7.3 through 7.6 enables remote authenticated attackers to modify data in certain SQL tables by injecting malicious SQL commands through improperly neutralized input. The CVSS score of 4.3 (Medium) reflects a constrained impact profile - integrity in specific tables is at risk, but confidentiality and availability are unaffected. A vendor patch is available via IBM's support portal, and no public exploit code has been identified at time of analysis.
Security restriction bypass in IBM i 7.3 through 7.6 exploits an interpretation conflict in the multipart parser, enabling a remote attacker with high administrative privileges to circumvent configured access controls with low integrity impact. The flaw (CWE-436) arises when the security enforcement layer and the processing layer disagree on how to interpret multipart message boundaries, allowing carefully crafted requests to evade security checks. No public exploit code and no CISA KEV listing have been identified at time of analysis; IBM has released a patch via its support portal.
Authorization bypass in LXD (Canonical) allows authenticated project members to circumvent container privilege isolation restrictions enforced at the project level. When a project is configured with `restricted.containers.privilege=isolated`, LXD's enforcement logic fails to apply the restriction if an instance is created or updated without explicitly setting the `security.idmap.isolated` key - effectively treating omission as permission. No public exploit code or CISA KEV listing exists at time of analysis, but the bypass is exploitable by any authenticated LXD user with instance-creation rights in a restricted project.
Improper authorization checks on a GitLab Enterprise Edition group settings page allow any authenticated user to view restricted configuration settings they should not have access to. GitLab EE versions from 17.7 through 19.0.5, 19.1.0 through 19.1.3, and 19.2.0 through 19.2.1 are affected; patched releases (19.0.6, 19.1.4, 19.2.2) are available. No public exploit code and no confirmed active exploitation exist at time of analysis.
Package metadata authorization bypass in JFrog Artifactory 7.161.0 through 7.161.15 allows authenticated low-privileged users to read package metadata from repositories they are explicitly denied read access to, under specific undisclosed conditions. The flaw is a missing authorization check (CWE-862) in the metadata access path, creating an unintended privilege boundary crossing within Artifactory's permission model. No active exploitation has been confirmed (no CISA KEV listing) and no public exploit code has been identified, but the network-accessible attack vector with no user interaction required makes this relevant for any multi-tenant or externally accessible Artifactory deployment.
JFrog Artifactory exposes private Puppet module metadata to authenticated users who lack repository read access, constituting a missing authorization control on a specific metadata retrieval endpoint. Any low-privilege user with a valid Artifactory account can silently enumerate Puppet module metadata from repositories they are explicitly denied access to, potentially revealing module names, versions, dependencies, and authorship details. No public exploit code has been identified at time of analysis, and this vulnerability has not been listed in the CISA KEV catalog, though the CVSS 4.3 score reflects a real, network-exploitable authorization bypass with limited but concrete confidentiality impact.
Unauthorized NuGet metadata exposure in JFrog Artifactory allows an authenticated user who lacks repository read permission to read private NuGet feed metadata under specific conditions, constituting a missing authorization control (CWE-862). All versions covered by the CPE wildcard (cpe:2.3:a:jfrog:artifactory:*) appear affected. An attacker with any valid Artifactory account can potentially enumerate or read package metadata from private NuGet repositories they should not have visibility into, leading to information disclosure of internal package names, versions, or dependency structures. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.