Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

jfrog Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-82329`Potential authentication bypass leading to administrative access in Artifactory	Exploitation statusKEV	FixYes	Affected productartifactory	Published08/28/2026	SeverityCritical
`CVE-2026-70550`Potential unauthorized access to private Composer repository metadata in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/25/2026	SeverityMedium
`CVE-2026-70548`SSRF In CocoaPods Via JFrog Artifactory External Dependency	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/25/2026	SeverityLow
`CVE-2026-69104`Potential unauthorized repository migration in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/25/2026	SeverityHigh
`CVE-2026-70551`Server-Side Request Forgery Via VCS remote download in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/25/2026	SeverityHigh
`CVE-2026-69106`Potential cache poisoning in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityHigh
`CVE-2026-42018`Anonymous user token generation exposure in JFrog Artifactory	Exploitation statusKEV	FixYes	Affected productartifactory	Published08/12/2026	SeverityHigh
`CVE-2026-69107`Potential unauthorized artifact access in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-69105`Potential package cache integrity issue in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityHigh
`CVE-2026-70547`Potential unauthorized metadata exposure in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-66016`Rendered Artifactory Helm manifests may contain generated TLS private keys	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-68759`Integration credential holders may impersonate users in JFrog Access	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityHigh
`CVE-2026-65926`Private Release Bundle versions may be disclosed under specific configurations	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityLow
`CVE-2026-66384`Authenticated users may write data outside the intended Docker cache path	Exploitation statusKEV	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-68758`Authenticated users may access restricted Artifactory support information	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-66375`Low-privilege users may remove protected Artifactory metadata	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityHigh
`CVE-2026-68757`Potential improper SAML signature verification in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityHigh
`CVE-2026-68756`Potential insecure deserialization in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-66382`Authenticated users may write files outside the intended Artifactory work directory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-66381`Repository readers may access content outside configured upstream paths	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-68760`Potential remember-me authentication bypass in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-66379`Authenticated users may view private Puppet module metadata	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-66378`Authenticated users may access private NuGet metadata	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-66377`Anonymous users may access restricted Artifactory repository information	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-68755`Bundle writers may alter trusted release information in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-66380`Authenticated users may access private OCI referrer metadata	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-68754`Publishers without delete permission can overwrite docker layer information	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-68753`Anonymous users may access restricted Artifactory content under specific configurations	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-66376`Deleted users may temporarily retain access to JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityMedium
`CVE-2026-68752`Project Resource Managers may escalate privileges in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/12/2026	SeverityHigh
`CVE-2026-65922`Potential unauthorized modification of Artifactory internal metadata	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityHigh
`CVE-2026-65923`Potential server-side request forgery in Artifactory Ansible repository handling	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityMedium
`CVE-2026-65617`Potential remote code execution on an Artifactory package service container.	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityHigh
`CVE-2026-65924`Server-Side Request Forgery (SSRF) via Terraform Remote repository	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityMedium
`CVE-2026-65925`Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityMedium
`CVE-2026-65616`Potential privilege escalation to JFrog administrator privileges	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityHigh
`CVE-2026-66015`JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityHigh
`CVE-2026-65618`Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityMedium
`CVE-2026-66018`JFrog Artifactory build environment properties exposure	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityMedium
`CVE-2026-66014`Potential authentication bypass leading to privilege escalation in Artifactory	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityHigh
`CVE-2026-65921`Potential path traversal leading to unauthorized file writes	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityHigh
`CVE-2026-42017`Privilege escalation via JFrog Worker event token exposure	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published07/27/2026	SeverityHigh
`CVE-2026-42016`Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation	Exploitation statusKEV	FixYes	Affected productartifactory	Published07/27/2026	SeverityHigh
`CVE-2025-14830`JFrog Artifactory Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productArtifactory (Workers)	Published01/04/2026	SeverityMedium
`CVE-2024-6915`JFrog Artifactory Cache Poisoning	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published08/05/2024	SeverityCritical
`CVE-2024-2248`JFrog Artifactory Header Injection	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published05/15/2024	SeverityMedium
`CVE-2024-4142`JFrog Artifactory Improper input validation within token creation flow	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published05/01/2024	SeverityCritical
`CVE-2024-3505`JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users	Exploitation statusNot known exploited	FixYes	Affected productArtifactory Self-Hosted	Published04/15/2024	SeverityMedium
`CVE-2024-2247`JFrog Artifactory Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published03/13/2024	SeverityHigh
`CVE-2023-42509`JFrog Artifactory Sensitive Data Leakage in Repository configuration process	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published03/07/2024	SeverityMedium
`CVE-2023-42661`JFrog Artifactory Improper input validation leads to arbitrary file write	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published03/07/2024	SeverityHigh
`CVE-2023-42662`JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published03/07/2024	SeverityCritical
`CVE-2023-42508`JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform	Exploitation statusNot known exploited	FixYes	Affected productartifactory	Published10/03/2023	SeverityMedium
`CVE-2022-0668`	Exploitation statusNot known exploited	FixYes	Affected productJFrog Artifactory	Published01/08/2023	SeverityMedium
`CVE-2021-23163`	Exploitation statusNot confirmed	FixYes	Affected productJFrog Artifactory	Published07/06/2022	SeverityLow
`CVE-2021-46687`	Exploitation statusNot confirmed	FixYes	Affected productJFrog Artifactory	Published07/06/2022	SeverityMedium
`CVE-2021-45721`	Exploitation statusNot confirmed	FixYes	Affected productJFrog Artifactory	Published07/06/2022	SeverityMedium
`CVE-2021-41834`	Exploitation statusNot confirmed	FixYes	Affected productartifactory	Published05/23/2022	SeverityMedium
`CVE-2021-45730`	Exploitation statusNot confirmed	FixYes	Affected productartifactory	Published05/19/2022	SeverityMedium
`CVE-2022-0573`	Exploitation statusNot confirmed	FixYes	Affected productJFrog Artifactory	Published05/16/2022	SeverityHigh
`CVE-2021-46270`	Exploitation statusNot confirmed	FixYes	Affected productJFrog Artifactory	Published03/02/2022	SeverityLow
`CVE-2021-45074`	Exploitation statusNot confirmed	FixYes	Affected productJFrog Artifactory	Published03/02/2022	SeverityMedium
`CVE-2021-3860`	Exploitation statusNot known exploited	FixYes	Affected productJFrog Artifactory	Published12/20/2021	SeverityHigh
`CVE-2019-17444`JFrog Artifactory does not enforce default admin password change	Exploitation statusNot confirmed	FixYes	Affected productartifactory	Published10/12/2020	SeverityCritical
`CVE-2020-2164`	Exploitation statusNot confirmed	FixNot confirmed	Affected productJenkins Artifactory Plugin	Published03/25/2020	SeverityUnknown
`CVE-2020-2165`	Exploitation statusNot confirmed	FixNot confirmed	Affected productJenkins Artifactory Plugin	Published03/25/2020	SeverityUnknown
`CVE-2019-19937`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/16/2020	SeverityUnknown
`CVE-2020-7931`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published01/23/2020	SeverityUnknown
`CVE-2019-10324`	Exploitation statusNot confirmed	FixNot confirmed	Affected productJenkins Artifactory Plugin	Published05/31/2019	SeverityUnknown
`CVE-2019-10323`	Exploitation statusNot confirmed	FixNot confirmed	Affected productJenkins Artifactory Plugin	Published05/31/2019	SeverityUnknown
`CVE-2019-10321`	Exploitation statusNot confirmed	FixNot confirmed	Affected productJenkins Artifactory Plugin	Published05/31/2019	SeverityUnknown
`CVE-2019-10322`	Exploitation statusNot confirmed	FixNot confirmed	Affected productJenkins Artifactory Plugin	Published05/31/2019	SeverityUnknown
`CVE-2018-19971`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/16/2019	SeverityUnknown
`CVE-2019-9733`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/11/2019	SeverityUnknown
`CVE-2018-1000424`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published01/09/2019	SeverityUnknown
`CVE-2018-1000206`	Exploitation statusNot confirmed	FixYes	Affected productNot confirmed	Published07/13/2018	SeverityUnknown
`CVE-2018-1000623`	Exploitation statusNot confirmed	FixYes	Affected productNot confirmed	Published07/09/2018	SeverityUnknown
`CVE-2016-10036`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published05/01/2018	SeverityUnknown
`CVE-2016-6501`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published12/09/2016	SeverityUnknown