CVE-2026-69104

7.6 highEPSS 0.3%

High (7.6). EPSS 0.3% chance of exploitation in the next 30 days.

An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue.

Severity

CVSS 3.1

7.6 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2026-08-25
Modified: 2026-08-28
Record from: the NVD, synced 2026-10-19

References

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
https://docs.jfrog.com/releases/docs/jfrog-security-advisories

Check your stack JSON