Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3879 articles · 205847 vulns · 37/41 feeds (7d)
← Back to list
7.6
CVE-2026-69104PATCHED
jfrog · artifactory

Potential unauthorized repository migration in JFrog Artifactory

Description

An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue.

Affected Products

VendorProductVersions
jfrogartifactory7.161.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
jfrogartifactorycert_advisory90%

References

  • https://docs.jfrog.com/releases/docs/jfrog-security-advisories(vendor-advisory)
  • https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases(vendor-advisory)

Related News (2 articles)

Tier B
BSI Advisories3d ago
[NEU] [hoch] JFrog Artifactory: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB4d ago
CVE-2026-69104 | JFrog Artifactory up to 7.161.18 Repository Migration privileges management
→ No new info (linked only)
CVSS 3.17.6 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
7.161.19
CWECWE-862
PublishedAug 25, 2026
Trending Score25
Source articles2
Independent2
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

MEDIUMCVE-2026-66384EXPKEV
Authenticated users may write data outside the intended Docker cache path
Trending: 106
HIGHCVE-2026-70551
Server-Side Request Forgery Via VCS remote download in JFrog Artifactory
Trending: 25
MEDIUMCVE-2026-70550
Potential unauthorized access to private Composer repository metadata in JFrog Artifactory
Trending: 22
LOWCVE-2026-70548
SSRF In CocoaPods Via JFrog Artifactory External Dependency
Trending: 21
HIGHCVE-2026-69106
Potential cache poisoning in JFrog Artifactory
Trending: 16

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 25, 2026
Discovered by ZDM
Aug 25, 2026
Patch Available
Aug 25, 2026