← Back

CVE-2026-65922

nvd nist
Published: Jul 27, 2026Modified: Oct 24, 2026

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Exploitability: 2.8 / Impact: 2.5
Source: NVD

Description

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is not affected.

Affected (6)

Products: Jfrog: Artifactory
Jfrog
1 product
Artifactory
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Jfrog
Artifactory
version < 7.111.18
Artifactory
7.117.0 ≤ version < 7.117.25
Artifactory
7.125.0 ≤ version < 7.125.18
Artifactory
7.133.0 ≤ version < 7.133.27
Artifactory
7.146.0 ≤ version < 7.146.34
Artifactory
7.161.0 ≤ version < 7.161.15

Related CWEs

CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

Source: reefs@jfrog.com
Release Notes
Source: reefs@jfrog.com
Vendor Advisory

Timeline

No history available yet.