VDB
CVE-2026-65618
CVE-2026-65618
PUBLISHED
CVSS 6.5 MEDIUM
Reported by JFROG · Published July 27, 2026
Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| jfrog | artifactory | 0 |
| jfrog | artifactory | 0 |
Timeline
- Jul 27, 2026 CVE Published
- Jul 28, 2026 Coalition ESS Score
- Jul 28, 2026 Security Advisory
- Jul 30, 2026 CVE Updated
- Aug 7, 2026 EPSS Score
- Aug 24, 2026 EPSS Score
- Sep 5, 2026 EPSS Score