CVE-2026-65618 — MEDIUM (6.5)

Q: How severe is CVE-2026-65618?

CVE-2026-65618 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-65618?

Check the references section above for vendor advisories and patch information. Affected products include: Jfrog Artifactory.

Vulnerability Description

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Jfrog	Artifactory	< 7.133.6

Related Weaknesses (CWE)

CWE-918

References

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releasesRelease Notes
https://docs.jfrog.com/releases/docs/jfrog-security-advisoriesVendor Advisory

FAQ

What is CVE-2026-65618?

CVE-2026-65618 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cach...

How severe is CVE-2026-65618?

CVE-2026-65618 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-65618?

Check the references section above for vendor advisories and patch information. Affected products include: Jfrog Artifactory.