CVE-2026-70548

EPSS 0.18%
Veröffentlicht 25.08.2026 15:17:16
Zuletzt bearbeitet 28.08.2026 21:29:30
Erkennungen
Login

SSRF In CocoaPods Via JFrog Artifactory External Dependency

Under specific circumstances, low-level user can run request to remote CocoaPods repos via JFrog Artifactory External Dependency.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

CNA 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

Herstellerjfrog

≫

Produkt artifactory

Default Statusunaffected

Version 7.161.11

Version < 7.161.19

Status affected

Version 7.146.0

Version < 7.146.36

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.077

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
reefs@jfrog.com	3.5	1.8	1.4	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

https://docs.jfrog.com/releases/docs/jfrog-security-advisories

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases

https://nvd.nist.gov/vuln/detail/CVE-2026-70548

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-70548

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-70548

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-70548