CVE-2026-65925

Name of the Vulnerable Software and Affected Versions JFrog Artifactory (affected versions not specified)

Description An issue exists where a user with read access to a Cargo remote repository can perform Server-Side Request Forgery (SSRF), a technique that allows an attacker to induce the server-side application to make requests to an unintended location. This allows the user to force Artifactory to request unintended URLs and return the resulting response.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.