VDB
CVE-2026-66014
CVE-2026-66014
PUBLISHED
CVSS 8.8 HIGH
Reported by JFROG · Published July 27, 2026
JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.
Risk Scores
CVSS 3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| jfrog | artifactory | 0, 7.117.0, 7.125.0 |
| jfrog | artifactory | 0, 7.117.0, 7.125.0 |
Timeline
- Jul 27, 2026 CVE Published
- Jul 27, 2026 CVE Updated
- Jul 28, 2026 Coalition ESS Score
- Jul 28, 2026 Security Advisory
- Aug 7, 2026 EPSS Score
- Aug 24, 2026 EPSS Score
- Aug 25, 2026 EPSS Score
- Aug 27, 2026 EPSS Score
- Aug 28, 2026 EPSS Score
- Aug 30, 2026 EPSS Score
- Sep 3, 2026 EPSS Score
- Sep 5, 2026 EPSS Score