Artifactory EUVD-2026-49579

An issue was discovered in JFrog Artifactory 6.7.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely e

In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modif

JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that

JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted ser

Privilege escalation in JFrog Artifactory allows low-privileged authenticated users to forge administrator JWTs by explo

Privilege escalation in JFrog Artifactory allows authenticated low-privilege attackers to gain administrative access by

Authenticated low-privilege users of JFrog Artifactory can write arbitrary files outside the intended build artifacts lo

Exposure of privileged authorization material in JFrog Artifactory allows an authenticated low-privileged user to obtain

JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead

JFrog Artifactory before 7.25.4 (Enterprise+ deployments only), is vulnerable to Blind SQL Injection by a low privileged

A missing permission check in Jenkins Artifactory Plugin 3.2.3 and earlier in various 'fillCredentialsIdItems' methods a

A missing permission check in Jenkins Artifactory Plugin 3.2.2 and earlier in ArtifactoryBuilder.DescriptorImpl#doTestCo