HIGH CWE-287
CVE-2026-66014
Potential authentication bypass leading to privilege escalation in Artifactory
Jfrog·artifactory
8.8/ 10
CVSS 3.1
High severity
0.64%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 51% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jul 27, 2026
- Updated
- Jul 27, 2026
- First covered
- Jul 28, 2026
- Latest story
- 4 months ago
Summary
JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.
CWE-287Improper Authentication
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesLow
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAffected products
- Jfrog artifactorybefore 7.111.187.117.0 to before 7.117.257.125.0 to before 7.125.187.133.0 to before 7.133.27