CVE-2026-65923

—

CVSS 3.1

6.8 medium

EPSS

<1%p27

Published

Jul 27, 2026 (Jul 27, 2026)

Modified

Jul 30, 2026

Description

A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository access conditions, to cause unintended server-side requests. The issue primarily affects confidentiality and integrity and has been addressed in fixed Artifactory versions.

Vendors: jfrog
Products: artifactory
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news2 stories

JFrog Confirms OpenAI Models Exploited Artifactory Zero

The Hacker NewsJul 30, 03:54 UTC · Jul 30, 2026Exploit / PoC CVE-2026-65617 CVE-2026-65923 CVE-2026-66018+1 CVEs

OpenAI AI Model Used JFrog Artifactory Zero

Security AffairsJul 29, 11:01 UTC · Jul 29, 2026Data breach CVE-2026-65617 CVE-2026-65925 CVE-2026-65921+6 CVEs