Artifactory CVE-2026-65923

An issue was discovered in JFrog Artifactory 6.7.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely e

Low-privileged users can exploit a deserialization flaw in JFrog Artifactory's package handling to potentially execute a

In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modif

JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that

Information disclosure in JFrog Artifactory allows authenticated users with read access to an ordinary repository to ret

JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted ser

Privilege escalation in JFrog Artifactory stems from an authentication handling weakness in how the platform processes i

Authenticated low-privilege users of JFrog Artifactory can write arbitrary files outside the intended build artifacts lo

Cache metadata poisoning in JFrog Artifactory enables a low-privileged authenticated user to corrupt cached artifact met

Exposure of privileged authorization material in JFrog Artifactory allows an authenticated low-privileged user to obtain

Privilege escalation in JFrog Artifactory Self-Hosted before 7.133.11 lets a low-privileged authenticated user leverage

Privilege escalation in JFrog Artifactory allows low-privileged authenticated users to forge administrator JWTs by explo