CVE-2026-69105
Received Received - Intake

Unauthenticated Cache Poisoning in Artifactory

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: JFrog

Description
An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-12
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2026-69105
EUVD
EUVD-2026-57261

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-345 The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an unauthenticated attacker to cause untrusted package content to be cached under specific conditions. This could affect the integrity and availability of artifacts in a system.

Impact Analysis

An attacker could manipulate cached content, leading to potential integrity issues or denial of service. The high impact on integrity and availability (CVSS 8.1) suggests significant risk to systems relying on artifact caching.

Mitigation Strategies

Implement strict input validation for package content. Monitor artifact caches for unexpected or untrusted entries. Restrict unauthenticated access to package repositories. Apply patches or updates from the vendor if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-69105. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart