What is CVE-2026-69105?

CVE-2026-69105 is a high-severity vulnerability in Jfrog Artifactory, classified under Insufficient Verification of Data Authenticity. CVSS score: 8.1/10. Published 2026-08-12.

How severe is CVE-2026-69105?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Jfrog Artifactory

CVE-2026-69105

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H.

Affected products

Jfrog Artifactory — versions 7.161.0

Weakness classification (CWE)

CWE-345 — Insufficient Verification of Data Authenticity

References

reefs@jfrog.com (vendor-advisory)
reefs@jfrog.com (vendor-advisory)

Frequently asked questions

What is CVE-2026-69105?: CVE-2026-69105 is a high-severity vulnerability in Jfrog Artifactory, classified under Insufficient Verification of Data Authenticity. CVSS score: 8.1/10. Published 2026-08-12.
How severe is CVE-2026-69105?: High severity. CVSS v3 base score is 8.1 out of 10.