CVEvulnerability

CVE-2026-65618

6.5 MEDIUM Published 2026-07-27 Modified 2026-10-24 Official page ↗

Status: Analyzed
Published: 2026-07-27
Last modified: 2026-10-24
Assigner: [email protected]
CVSS 3.1 ([email protected]): 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-918

Description

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.

Affected configurations

• jfrog artifactory (< 7.133.6)

Weakness · CWE (1)

CWE-918 Server-Side Request Forgery weakness

References

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases Release Notes
https://docs.jfrog.com/releases/docs/jfrog-security-advisories Vendor Advisory

CVE-2026-65618

Description

Affected configurations

Related

Weakness · CWE (1)

References