Known Exploited Vulnerabilities August 27, 2026 · CISA KEV Catalog

CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-66384 JFrog
Related: CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability Known Exploited Vulnerabilities · Sep 11, 2026
CVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability Known Exploited Vulnerabilities · Sep 11, 2026
CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability Known Exploited Vulnerabilities · Sep 02, 2026