Back to list

NCSC-2026-0272 [1.00] [M/H] Kwetsbaarheden verholpen in JFrog Artifactory — NCSC-2026-0272

NCSC-NL · NCSC-NL · NCSC-2026-0272

ID
NCSC-2026-0272
Date
Source
NCSC-NL
Vendor
NCSC-NL
Threat
high

Summary

JFrog heeft meerdere kwetsbaarheden verholpen in JFrog Artifactory De kwetsbaarheden betreffen verschillende onderdelen van JFrog Artifactory. - Er is een privilege-escalatie mogelijk doordat het systeem de scope van tokens niet controleert, waardoor een aanvaller zijn rechten kan verhogen. - Daarnaast kunnen gebruikers met beperkte rechten toegang krijgen tot geprivilegieerde autorisatiematerialen en kunnen zij…

Timeline

Published by source
2026-07-31

Risk context

  • Reported severity or threat level: high.
  • Review exposure for the affected product or family: Security advisory.

Product

Security advisory

What to do

General, cautious steps (verify details in the official source):

  • Prioritize patching or mitigation immediately (treat as actively risky).
  • Identify affected product versions in your inventory and verify whether you are impacted.
  • Apply vendor patches/updates or recommended mitigations as soon as available.
  • Read the official advisory for exact affected versions and remediation steps.

Official advisory

Evidence and provenance

Canonical advisory ID
NCSC-2026-0272
Source
NCSC-NL
Vendor
NCSC-NL
Published by source
2026-07-31
Last source activity
2026-07-31
Curated by
hlukh.ch

Related advisories and connections

These advisories are connected by shared CVE, product, vendor, source, or time signals.