CVE-2026-65617: Potential remote code execution on an Artifactory package service container.
A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-65617?
CVE-2026-65617 has a high severity score of 8.8.
What are the potential impacts of CVE-2026-65617?
CVE-2026-65617 can impact the confidentiality, integrity, and availability of an Artifactory package service container.
How can I mitigate CVE-2026-65617?
Mitigation for CVE-2026-65617 involves reviewing and limiting access to vulnerable repositories and applying the latest security patches from JFrog.
Who is affected by CVE-2026-65617?
CVE-2026-65617 affects users of JFrog Artifactory who utilize package handling features with specific repository configurations.
Is remote code execution possible with CVE-2026-65617?
Yes, CVE-2026-65617 allows for potential remote code execution due to the deserialization weakness in JFrog Artifactory.