CVE-2026-66380

Zwakheid

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.

Getroffen producten

• jfrog artifactory

Bronnen

• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
• https://docs.jfrog.com/releases/docs/jfrog-security-advisories