CVE-2026-65618 — Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerabili…

CVE-2026-65618

Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability PUBLISHED

Description (CNA)

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.

Affected (CNA)

Vendor / product	Versions
jfrog / artifactory	affected 0 before 7.133.6

CWE

CWE-918

References

https://docs.jfrog.com/releases/docs/jfrog-security-advisories
https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.