CVE-2026-66014

HIGH

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.

CVSS v3.1 Score

8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 7/27/2026Modified: 7/30/2026

Related Intelligence (1)

CRITICALVulnerability

NVD CRITICAL: CVE-2026-66014 — JFrog Artifactory contains an authentication handling weakness in internal reque...

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.

CVE-2026-66014
NIST NVD

References (2)

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releasesRelease Noteshttps://docs.jfrog.com/releases/docs/jfrog-security-advisoriesVendor Advisory