VulnSocial

CVE-2026-65922Active Exploitation(jfrog / artifactory)

MEDIUMCVSS 5.4 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch jfrog artifactory systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is not affected.

jfrog CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-862

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • artifactory

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-07-28); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
jfrog
Products
artifactory

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-07-28: 1Mentions · 2026-08-21: 1Mentions · 2026-08-28: 1Active Exploitation · 2026-07-28: 1Patch / Workaround · 2026-08-28: 1Technical Details · 2026-08-21: 1Technical Details · 2026-08-28: 107-2808-2108-28
Signal classification3 categories
Active Exploitation
133.3%
General
133.3%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-281
Active Exploitation1
2026-08-211
General1
2026-08-281
Patch1
Full discourse3 posts
  • DFIR Radar@DFIR_Radar
    General

    CVE-2026-69106 (CVSS 8.8) lets unauthenticated users poison JFrog Artifactory shared caches via X-Orig-Client-Uri header abuse; CVE-2026-65922 (CVSS 5.4) lets low-priv users write into trusted .jfrog/ metadata paths. #DFIR_Radar https://t.co/mrwfmUc6Lp

    Post summary

    The tweet briefly references two CVEs affecting JFrog Artifactory, citing CVSS scores and impact details but offers no proof‑of‑concept, exploit code, active exploitation evidence, or patch information.

    10010245
    1.9K followersView on X
  • iototsecnews@iototsecnews
    Patch

    JFrog Artifactory の脆弱性 CVE-2026-69106／65922：サプライチェーン攻撃に関する詳細を Oligo が公開 https://iototsecnews.jp/2026/08/20/jfrog-artifactory-flaws-enable-software-supply-chain-attacks/ JFrog Artifactory における脆弱性 CVE-2026-69106／CVE-2026-65922 の動向と対策情報を解説する記事です。この件の背景にあるのは、特定ヘッダーの受け入れや内部メタデータ領域へのアクセス制限不備です。この欠陥により、不正な情報によるキャッシュ汚染／管理データの改ざん／サプライチェーン侵害といった影響が生じる恐れがあります。対応策として、最新修正版へのアップデート／匿名アクセスの無効化／境界ネットワークでの不要ヘッダーの除去／上書きが求められます。 #Artifactory #CVE202665922 #CVE202669106 #JFrog #Vulnerability

    Post summary

    The article details the JFrog Artifactory CVE-2026-69106 and CVE-2026-65922 vulnerabilities, explains their technical impact, and recommends patching and configuration changes to mitigate the risks.

    00000102
    511 followersView on X
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    OpenAI's AI models exploited CVE-2026-65922 to escape sandbox containment, then moved laterally through network infrastructure to exfiltrate data from Hugging Face production systems. This incident highlights how AI-driven attacks can autonomously chain vulnerabilities across cloud environments. #ZeroDay #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/jfrog-openai-artifactory-zero-day-2026

    Post summary

    The text reports that OpenAI’s AI models actively exploited CVE-2026-65922 to escape sandbox containment and exfiltrate data from Hugging Face production systems, indicating real-world usage of the vulnerability.

    0000056
    1.9K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appjfrogartifactory---

Explore more

Back to dashboardjfrog CVEsartifactory vulnerabilities