Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65618) - Vulnerability Database

Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65618)

Description

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.

References

CVE-2026-65618

Related Vulnerabilities

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2022-25763) High
Common tags: Missing Update Known Vulnerabilities
Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-36231) Medium
Common tags: Missing Update Known Vulnerabilities
SeoPanel Cross-site Scripting (XSS) Vulnerability (CVE-2020-35930) Medium
Common tags: Missing Update Known Vulnerabilities
PHP-Fusion CVE-2020-35952 Vulnerability (CVE-2020-35952) Medium
Common tags: Missing Update Known Vulnerabilities
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35984) Medium
Common tags: Missing Update Known Vulnerabilities

Severity

Medium

Classification

CVE-2026-65618
CWE-918
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update
Known Vulnerabilities