CVE-2026-65923: Potential server-side request forgery in Artifactory Ansible repository handling
Published Jul 27, 2026
·Updated
A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository access conditions, to cause unintended server-side requests. The issue primarily affects confidentiality and integrity and has been addressed in fixed Artifactory versions.
Affected Software
7 affected components
JFrog Artifactory
JFrog Artifactory<7.111.18
JFrog Artifactory>=7.117.0<7.117.25
JFrog Artifactory>=7.125.0<7.125.18
JFrog Artifactory>=7.133.0<7.133.27
JFrog Artifactory>=7.146.0<7.146.34
JFrog Artifactory>=7.161.0<7.161.15
Event History
Jul 27, 2026
CVE Published
via MITRE·07:43 PM
Data Sourced
via MITRE·07:43 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-65923?
The severity of CVE-2026-65923 is medium with a base score of 6.8.
2
How do I fix CVE-2026-65923?
To fix CVE-2026-65923, upgrade to the latest fixed version of JFrog Artifactory.
3
What type of vulnerability is CVE-2026-65923?
CVE-2026-65923 is a server-side request forgery (SSRF) vulnerability.
4
What are the potential impacts of CVE-2026-65923?
CVE-2026-65923 primarily affects confidentiality and integrity by allowing unintended server-side requests.
5
Which software is affected by CVE-2026-65923?
CVE-2026-65923 affects JFrog Artifactory, specifically in its handling of Ansible repositories.