PT-2026-65114 · Jfrog · Artifactory

CVE-2026-66014 · Publicado 2026-07-27 · Atualizado 2026-07-27

Mitre

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2026-66014

Produtos afetados

Artifactory

Referências · 3

• https://docs.jfrog.com/releases/docs/jfrog-security-advisories · Aviso do Fabricante
• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-66014 · Nota de Segurança