CVE-2026-65618: JFrog Artifactory

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.

Affected products

• JFrog Artifactory: before 7.133.6 (fixed in 7.133.6)

Published 2026-07-27. Last modified 2026-07-30.