AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JFrogCVE-2026-69107

JFrog artifactory: missing authorization

JFrog

CVE-2026-69107 · Published Aug 12, 2026 · updated Sep 11, 2026

Medium5.9
Fix: upgrade to 7.104.16 or later (4 fixed versions below)
JFrog advisory

An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.

Affected versions

PackageAffectedFixed in
artifactory
Product
< 7.104.167.104.16
>= 7.111.0, < 7.111.147.111.14
>= 7.117.0, < 7.117.217.117.21
>= 7.125.0, < 7.125.147.125.14
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-862

More JFrog advisories

All JFrog
High 8.8Aug 12JFrog artifactory: improper input validationCVE-2026-69106fixed in 7.146.28High 7.5Aug 12JFrog artifactory: improper authenticationCVE-2026-42018fixed in 7.111.20 +3Medium 4.3Aug 12JFrog artifactory: missing authorizationCVE-2026-70547fixed in 7.161.16High 8.1Aug 12JFrog artifactory: insufficient authenticity checkCVE-2026-69105fixed in 7.161.16High 7.2Aug 12JFrog artifactory: improper signature checkCVE-2026-68759fixed in 7.146.35 +1Medium 6.5Aug 12JFrog artifactory: missing authorizationCVE-2026-68758fixed in 7.146.35 +1