NetSight
high8.8

CVE-2026-65617

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under…

Impact

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions.

Affected products

VendorProductAffected versions
JfrogArtifactory
before 7.111.18
from 7.117.0 before 7.117.25
from 7.125.0 before 7.125.18
from 7.133.0 before 7.133.27
from 7.146.0 before 7.146.34
from 7.161.0 before 7.161.15

Weakness classification

References