Security Advisory

CVE-2026-65924

6.5
MEDIUM

Vulnerability Description

JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery (SSRF). An authenticated user - or, if anonymous access is enabled on the repository, an unauthenticated user - could cause Artifactory to issue outbound HTTP requests to arbitrary destinations and receive the response content.
Published Date July 27, 2026
Official Source NIST NVD Advisory