Dashboard / CVE-2026-66014

CVE-2026-66014

HIGH
MEDIUM Priority: 0.06 BB Relevance: 68/100
Published: 2026-07-27 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
jfrog artifactory < 7.111.18
jfrog artifactory 7.117.0 – 7.117.25
jfrog artifactory 7.125.0 – 7.125.18
jfrog artifactory 7.133.0 – 7.133.27
jfrog artifactory 7.146.0 – 7.146.34
jfrog artifactory 7.161.0 – 7.161.15

References & Advisories (2)

Bug Bounty Relevance

68 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.64%
Raw Score 0.006400
Percentile 50.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00640
2026-10-28
0.00640

Intelligence Sources

nvd ref →

External Links