CVE-2026-66014: JFrog Artifactory

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.

Affected products

• JFrog Artifactory: before 7.111.18 (fixed in 7.111.18); from 7.117.0, before 7.117.25 (fixed in 7.117.25); from 7.125.0, before 7.125.18 (fixed in 7.125.18); from 7.133.0, before 7.133.27 (fixed in 7.133.27); from 7.146.0, before 7.146.34 (fixed in 7.146.34); from 7.161.0, before 7.161.15 (fixed in 7.161.15)

Published 2026-07-27. Last modified 2026-09-15.