Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,245All CVEsplus 18,875 rejected
- 801Last 24 hours3,082 in the last 7 days
- 17,421Last 30 days1,573 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 17 | 24 | 2 | 0 | 45 | 65 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 20 |
| 2024 | 3 | 2 | 3 | 0 | 0 | 8 | 20 |
| 2023 | 0 | 0 | 2 | 0 | 0 | 2 | 12 |
| 2022 | 0 | 1 | 5 | 2 | 0 | 8 | 10 |
| 2021 | 0 | 1 | 0 | 0 | 0 | 1 | 2 |
| 2020 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-92892 | Potential command execution on the host running JFrog CLI.jfrog · jfrog-cli | Critical9.0 |
| CVE-2026-82329 | Potential authentication bypass leading to administrative access in ArtifactoryExploitedjfrog · artifactory | Critical9.8 |
| CVE-2026-70550 | Potential unauthorized access to private Composer repository metadata in JFrog Artifactoryjfrog · artifactory | Medium6.5 |
| CVE-2026-70548 | SSRF In CocoaPods Via JFrog Artifactory External Dependencyjfrog · artifactory | Low3.5 |
| CVE-2026-69104 | Potential unauthorized repository migration in JFrog Artifactoryjfrog · artifactory | High7.6 |
| CVE-2026-70551 | Server-Side Request Forgery Via VCS remote download in JFrog Artifactoryjfrog · artifactory | High8.5 |
| CVE-2026-69106 | Potential cache poisoning in JFrog Artifactoryjfrog · artifactory | High8.8 |
| CVE-2026-42018 | Anonymous user token generation exposure in JFrog ArtifactoryExploitedjfrog · artifactory | High7.5 |
| CVE-2026-69107 | Potential unauthorized artifact access in JFrog Artifactoryjfrog · artifactory | Medium5.9 |
| CVE-2026-69105 | Potential package cache integrity issue in JFrog Artifactoryjfrog · artifactory | High8.1 |
| CVE-2026-70547 | Potential unauthorized metadata exposure in JFrog Artifactoryjfrog · artifactory | Medium4.3 |
| CVE-2026-66016 | Rendered Artifactory Helm manifests may contain generated TLS private keysjfrog · artifactory | Medium6.7 |
| CVE-2026-68759 | Integration credential holders may impersonate users in JFrog Accessjfrog · artifactory | High7.2 |
| CVE-2026-65926 | Private Release Bundle versions may be disclosed under specific configurationsjfrog · artifactory | Low3.1 |
| CVE-2026-66384 | Authenticated users may write data outside the intended Docker cache pathExploitedjfrog · artifactory | Medium5.3 |
| CVE-2026-68758 | Authenticated users may access restricted Artifactory support informationjfrog · artifactory | Medium6.5 |
| CVE-2026-66375 | Low-privilege users may remove protected Artifactory metadatajfrog · artifactory | High8.1 |
| CVE-2026-68757 | Potential improper SAML signature verification in JFrog Artifactoryjfrog · artifactory | High7.5 |
| CVE-2026-68756 | Potential insecure deserialization in JFrog Artifactoryjfrog · artifactory | Medium6.6 |
| CVE-2026-66382 | Authenticated users may write files outside the intended Artifactory work directoryjfrog · artifactory | Medium4.3 |
| CVE-2026-66381 | Repository readers may access content outside configured upstream pathsjfrog · artifactory | Medium5.3 |
| CVE-2026-68760 | Potential remember-me authentication bypass in JFrog Artifactoryjfrog · artifactory | Medium5.3 |
| CVE-2026-66379 | Authenticated users may view private Puppet module metadatajfrog · artifactory | Medium4.3 |
| CVE-2026-66378 | Authenticated users may access private NuGet metadatajfrog · artifactory | Medium4.3 |
| CVE-2026-66377 | Anonymous users may access restricted Artifactory repository informationjfrog · artifactory | Medium5.3 |
| CVE-2026-68755 | Bundle writers may alter trusted release information in JFrog Artifactoryjfrog · artifactory | Medium4.3 |
| CVE-2026-66380 | Authenticated users may access private OCI referrer metadatajfrog · artifactory | Medium4.3 |
| CVE-2026-68754 | Publishers without delete permission can overwrite docker layer informationjfrog · artifactory | Medium6.5 |
| CVE-2026-68753 | Anonymous users may access restricted Artifactory content under specific configurationsjfrog · artifactory | Medium5.3 |
| CVE-2026-66376 | Deleted users may temporarily retain access to JFrog Artifactoryjfrog · artifactory | Medium4.2 |
| CVE-2026-68752 | Project Resource Managers may escalate privileges in JFrog Artifactoryjfrog · artifactory | High7.2 |
| CVE-2026-65922 | Potential unauthorized modification of Artifactory internal metadatajfrog · artifactory | High7.1 |
| CVE-2026-65923 | Potential server-side request forgery in Artifactory Ansible repository handlingjfrog · artifactory | Medium6.8 |
| CVE-2026-65617 | Potential remote code execution on an Artifactory package service container.jfrog · artifactory | High8.8 |
| CVE-2026-65924 | Server-Side Request Forgery (SSRF) via Terraform Remote repositoryjfrog · artifactory | Medium6.5 |
| CVE-2026-65925 | Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repositoryjfrog · artifactory | Medium6.5 |
| CVE-2026-65616 | Potential privilege escalation to JFrog administrator privilegesjfrog · artifactory | High8.8 |
| CVE-2026-66015 | JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.jfrog · artifactory | High7.2 |
| CVE-2026-65618 | Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerabilityjfrog · artifactory | Medium6.5 |
| CVE-2026-66018 | JFrog Artifactory build environment properties exposurejfrog · artifactory | Medium6.5 |
| CVE-2026-66014 | Potential authentication bypass leading to privilege escalation in Artifactoryjfrog · artifactory | High8.8 |
| CVE-2026-65921 | Potential path traversal leading to unauthorized file writesjfrog · artifactory | High8.8 |
| CVE-2026-42017 | Privilege escalation via JFrog Worker event token exposurejfrog · artifactory | High8.8 |
| CVE-2026-42016 | Incorrect authorization validation of user token in JFrog Artifactory allows Privilege EscalationExploitedjfrog · artifactory | High8.1 |
| CVE-2025-14830 | JFrog Artifactory Cross-Site ScriptingJFrog · Artifactory (Workers) | Medium4.9 |
| CVE-2024-6915 | JFrog Artifactory Cache PoisoningJFrog · Artifactory | Critical9.3 |
| CVE-2024-2248 | JFrog Artifactory Header InjectionJFrog · Artifactory | Medium6.4 |
| CVE-2024-4142 | JFrog Artifactory Improper input validation within token creation flowJFrog · Artifactory | Critical9.0 |
| CVE-2024-3505 | JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege usersJFrog · Artifactory Self-Hosted | Medium4.3 |
| CVE-2024-2247 | JFrog Artifactory Cross-Site ScriptingJFrog · Artifactory | High8.8 |