CVE-2026-68752
Awaiting Analysis Awaiting Analysis - Queue

Project Resource Manager Privilege Escalation

Publication date: 2026-08-12

Last updated on: 2026-08-28

Assigner: JFrog

Description
A Project Resource Manager may gain broader administrative privileges under specific conditions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-28
Generated
2026-09-01
AI Q&A
2026-08-12
EPSS Evaluated
2026-08-31
NVD
CVE-2026-68752
EUVD
EUVD-2026-57240

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
jfrog artifactory 7.161.15

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows a Project Resource Manager to gain broader administrative privileges under specific conditions. This means an attacker with limited access could escalate their permissions to perform actions typically restricted to higher-level administrators.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access to sensitive data, system modifications, or disruption of services. Organizations using affected Project Resource Manager software may face data breaches, compliance violations, or operational disruptions.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may result in violations of GDPR, HIPAA, or other regulations. Non-compliance risks include legal penalties, reputational damage, and loss of customer trust.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68752. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart