| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-66384 | Authenticated users may write data outside the intended Docker cache path | jfrog | artifactory | Medium | 5.3 | 2026-08-12 15:14:05 | Deep Dive |
| CVE-2026-68758 | Authenticated users may access restricted Artifactory support information | jfrog | artifactory | Medium | 6.5 | 2026-08-12 15:12:57 | Deep Dive |
| CVE-2026-66375 | Low-privilege users may remove protected Artifactory metadata | jfrog | artifactory | High | 8.1 | 2026-08-12 15:11:36 | Deep Dive |
| CVE-2026-68757 | Potential improper SAML signature verification in JFrog Artifactory | jfrog | artifactory | High | 7.5 | 2026-08-12 15:10:23 | Deep Dive |
| CVE-2026-68756 | Potential insecure deserialization in JFrog Artifactory | jfrog | artifactory | Medium | 6.6 | 2026-08-12 15:09:22 | Deep Dive |
| CVE-2026-66382 | Authenticated users may write files outside the intended Artifactory work directory | jfrog | artifactory | Medium | 4.3 | 2026-08-12 15:08:11 | Deep Dive |
| CVE-2026-66381 | Repository readers may access content outside configured upstream paths | jfrog | artifactory | Medium | 5.3 | 2026-08-12 15:07:02 | Deep Dive |
| CVE-2026-68760 | Potential remember-me authentication bypass in JFrog Artifactory | jfrog | artifactory | Medium | 5.3 | 2026-08-12 15:04:59 | Deep Dive |
| CVE-2026-66379 | Authenticated users may view private Puppet module metadata | jfrog | artifactory | Medium | 4.3 | 2026-08-12 15:03:03 | Deep Dive |
| CVE-2026-66378 | Authenticated users may access private NuGet metadata | jfrog | artifactory | Medium | 4.3 | 2026-08-12 15:02:09 | Deep Dive |
| CVE-2026-66377 | Anonymous users may access restricted Artifactory repository information | jfrog | artifactory | Medium | 5.3 | 2026-08-12 15:00:50 | Deep Dive |
| CVE-2026-68755 | Bundle writers may alter trusted release information in JFrog Artifactory | jfrog | artifactory | Medium | 4.3 | 2026-08-12 15:00:06 | Deep Dive |
| CVE-2026-66380 | Authenticated users may access private OCI referrer metadata | jfrog | artifactory | Medium | 4.3 | 2026-08-12 14:59:25 | Deep Dive |
| CVE-2026-68754 | Publishers without delete permission can overwrite docker layer information | jfrog | artifactory | Medium | 6.5 | 2026-08-12 14:58:44 | Deep Dive |
| CVE-2026-68753 | Anonymous users may access restricted Artifactory content under specific configurations | jfrog | artifactory | Medium | 5.3 | 2026-08-12 14:57:39 | Deep Dive |
| CVE-2026-66376 | Deleted users may temporarily retain access to JFrog Artifactory | jfrog | artifactory | Medium | 4.2 | 2026-08-12 14:55:59 | Deep Dive |
| CVE-2026-68752 | Project Resource Managers may escalate privileges in JFrog Artifactory | jfrog | artifactory | High | 7.2 | 2026-08-12 14:55:01 | Deep Dive |
| CVE-2026-14479 | Denial of Service in Autodesk Installer IPC Channel | Autodesk | Installer | Medium | 5.5 | 2026-08-12 14:54:59 | Deep Dive |
| CVE-2026-14478 | Incorrect Permission Assignment in Autodesk Installer Named Pipes | Autodesk | Installer | High | 7.8 | 2026-08-12 14:54:06 | Deep Dive |
| CVE-2026-73291🧪 | Seerr: Path traversal to RCE via /avatarproxy image cache filename from upstream ETag | seerr-team | seerr | High | 7.1 | 2026-08-12 14:48:22 | Deep Dive |