Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-65924

No fix known EPSS <1%CVSS 6.5

JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery (SSRF). An authenticated user - or, if anonymous access is enabled on the repository, an unauthenticated user - could cause Artifactory to issue outbound HTTP requests to arbitrary destinations and receive the response content.

Published 2026-07-27 · CVE record · OSV

Products: Jfrog Artifactory