AR
Product
artifactory
On CISA KEVExploited in the wild
75
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 27Medium 38Low 3
Watch
Add artifactory to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-70548 | 3.5 | Aug 25 | SSRF In CocoaPods Via JFrog Artifactory External Dependency Affected: 7.161.11 before 7.161.19; 7.146.0 before 7.146.36 |
| CVE-2026-65926 | 3.1 | Aug 12 | Private Release Bundle versions may be disclosed under specific configurations Affected: before 7.146.35; 7.161.0 before 7.161.16 |
| CVE-2021-46270 | 2.7 | Mar 2 | JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all available repository names due to insufficient permission… Affected: 7.0.0 before 7.31.10 |
Showing 3