CVE-2026-69104

EPSS 0.18%
Veröffentlicht 25.08.2026 15:16:37
Zuletzt bearbeitet 28.08.2026 21:29:30
Erkennungen
Login

Potential unauthorized repository migration in JFrog Artifactory

An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

CNA 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

Herstellerjfrog

≫

Produkt artifactory

Default Statusunaffected

Version 7.161.0

Version < 7.161.19

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.071

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
reefs@jfrog.com	7.6	2.8	4.7	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://docs.jfrog.com/releases/docs/jfrog-security-advisories

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases

https://nvd.nist.gov/vuln/detail/CVE-2026-69104

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-69104

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-69104

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-69104