JFrogCVE-2026-69105

JFrog artifactory: insufficient authenticity check

High8.1CVE-2026-69105 · Published Aug 12, 2026 · updated Sep 11, 2026

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.

JFrog advisory

Affected versions

Package	Affected	Fixed in
artifactory Product	>= 7.161.0, < 7.161.16	7.161.16

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-345

More JFrog advisories

All JFrog

Date	Advisory	Severity	Fixed in
Aug 12	JFrog artifactory: improper input validation High8.8Aug 12 CVE-2026-691067.146.28	High8.8	7.146.28
Aug 12	JFrog artifactory: improper authentication High7.5Aug 12 CVE-2026-420187.111.20+3 more	High7.5	7.111.20+3 more
Aug 12	JFrog artifactory: missing authorization Medium4.3Aug 12 CVE-2026-705477.161.16	Medium4.3	7.161.16
Aug 12	JFrog artifactory: missing authorization Medium5.9Aug 12 CVE-2026-691077.104.16+3 more	Medium5.9	7.104.16+3 more
Aug 12	JFrog artifactory: improper signature check High7.2Aug 12 CVE-2026-687597.146.35+1 more	High7.2	7.146.35+1 more
Aug 12	JFrog artifactory: missing authorization Medium6.5Aug 12 CVE-2026-687587.146.35+1 more	Medium6.5	7.146.35+1 more

Affected versions

More JFrog advisories

Critical advisories by email