CVE-2026-65926Private Release Bundle versions may be disclosed under specific configurations

Descripción

An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://docs.jfrog.com/releases/docs/jfrog-security-advisories vendor-advisory
• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases vendor-advisory