CVE-2026-69105

Awaiting Analysis Awaiting Analysis - Queue

Unauthenticated Cache Poisoning in Artifactory

Publication date: 2026-08-12

Last updated on: 2026-08-28

Assigner: JFrog

Description

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-28

Generated

2026-09-02

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-31

NVD

CVE-2026-69105

EUVD

EUVD-2026-57261

Affected Vendors & Products

Vendor	Product	Version / Range
jfrog	artifactory	7.161.15

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-345	The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

Executive Summary

This vulnerability allows an unauthenticated attacker to cause untrusted package content to be cached under specific conditions. This could affect the integrity and availability of artifacts in a system.

Detection Guidance

To detect this vulnerability, monitor Artifactory logs for unusual caching behavior or untrusted package content. Check for unexpected cache entries under artifact paths and verify package integrity. Use commands like 'curl' to inspect cache headers or 'grep' to search logs for cache-related errors. Ensure artifact repositories are scanned for tampered content.

Impact Analysis

An attacker could manipulate cached content, leading to potential integrity issues or denial of service. The high impact on integrity and availability (CVSS 8.1) suggests significant risk to systems relying on artifact caching.

Compliance Impact

This vulnerability could impact compliance by allowing unauthenticated attackers to alter cached artifact integrity, potentially violating data integrity requirements in GDPR and HIPAA. The high impact on integrity (I:H) and availability (A:H) suggests risks to secure data handling and audit trails.

Mitigation Strategies

Implement strict input validation for package content. Monitor artifact caches for unexpected or untrusted entries. Restrict unauthenticated access to package repositories. Apply patches or updates from the vendor if available.

Hi! I’m here to help you understand CVE-2026-69105. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70