Unrated severityNVD Advisory· Published Jul 27, 2026· Updated Jul 27, 2026
Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability
CVE-2026-65618
Description
Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.
Affected products
1Patches
Vulnerability mechanics
References
2- docs.jfrog.com/releases/docs/artifactory-self-managed-releasesmitrevendor-advisory
- docs.jfrog.com/releases/docs/jfrog-security-advisoriesmitrevendor-advisory
News mentions
1- JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face BreachThe Hacker News · Jul 28, 2026