JFrog Artifactory <7.133.27

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

critical

by severity

0critical2high1medium0low

updated 2026-10-27

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-42016US	high8.8OT critical	8.64% (95th)	KEV	no fix	2026-07-27	—
CVE-2026-65616US	—	0.37% (31st)	Exploit	no fix	2026-07-27	—
CVE-2026-65617US	—	0.65% (51st)	—	no fix	2026-07-27	—
CVE-2026-66014US	high8.8	0.64% (50th)	—	no fix	2026-07-27	—
CVE-2026-65921US	—	0.59% (48th)	—	no fix	2026-07-27	—
CVE-2026-66015US	—	0.57% (47th)	—	no fix	2026-07-27	—
CVE-2026-42017US	—	0.52% (44th)	—	no fix	2026-07-27	—
CVE-2026-66018US	—	0.45% (39th)	—	no fix	2026-07-27	—
CVE-2026-65924US	—	0.41% (35th)	—	no fix	2026-07-27	—
CVE-2026-65925US	—	0.40% (34th)	—	no fix	2026-07-27	—
CVE-2026-65618US	—	0.35% (29th)	—	no fix	2026-07-27	—
CVE-2026-65923US	—	0.35% (28th)	—	no fix	2026-07-27	—
CVE-2026-65922US	medium5.4OT elevated	0.34% (27th)	—	no fix	2026-07-27	—

The flaw types (CWEs) most of these CVEs share.

CWE-918Server-Side Request Forgery (SSRF)4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-347Improper Verification of Cryptographic Signature1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.