Description

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.

Remediation

References

CVE-2026-66014

Related Vulnerabilities

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2221)

Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-2372)

EspoCRM Server-Side Request Forgery (SSRF) Vulnerability (CVE-2023-46736)

Oracle Application Server CVE-2008-7235 Vulnerability (CVE-2008-7235)

Oracle Database Server CVE-2010-0867 Vulnerability (CVE-2010-0867)

Severity

Critical

Classification

CVE-2026-66014 CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities