Artifactory CVE-2026-65924

Authentication bypass in JFrog Artifactory allows an unauthenticated, network-adjacent attacker to escalate to full admi

Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the inten

An issue was discovered in JFrog Artifactory 6.7.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely e

Low-privileged users can exploit a deserialization flaw in JFrog Artifactory's package handling to potentially execute a

In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modif

JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that

Server-side request forgery in JFrog Artifactory Ansible repository handling allows authenticated users with repository

Information disclosure in JFrog Artifactory allows authenticated users with read access to an ordinary repository to ret

JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted ser

Privilege escalation in JFrog Artifactory stems from an authentication handling weakness in how the platform processes i

Authenticated low-privilege users of JFrog Artifactory can write arbitrary files outside the intended build artifacts lo

Cache metadata poisoning in JFrog Artifactory enables a low-privileged authenticated user to corrupt cached artifact met