CVE-2026-65618CWE-918

Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability

Medium · published July 27, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
27.8
In the wild
Unconfirmed
What it is

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00354 · 27.8th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-07-27T19:32Z
EPSS history
Timeline
  • 27 JUL 19:32Z
    Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability
    cvelistv5