CVE-2026-65617

Summary

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions.

Affected Software

VendorProductVersion RangeStatus
jfrogartifactory0 < 7.111.18affected
jfrogartifactory7.117.0 < 7.117.25affected
jfrogartifactory7.125.0 < 7.125.18affected
jfrogartifactory7.133.0 < 7.133.27affected
jfrogartifactory7.146.0 < 7.146.34affected
jfrogartifactory7.161.0 < 7.161.15affected

Weaknesses

  • CWE-502: CWE-502 Deserialization of Untrusted Data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References