PT-2026-65114 · Jfrog · Artifactory

CVE-2026-66014 · Published 2026-07-27 · Updated 2026-07-27

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-66014

Affected Products

Artifactory

References · 3

• https://docs.jfrog.com/releases/docs/jfrog-security-advisories · Vendor Advisory
• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-66014 · Security Note