RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-69106 Potential cache poisoning in JFrog Artifactory
CVSS 8.8 highEPSS 0.52%JFrog
CVE-2026-69107 Potential unauthorized artifact access in JFrog Artifactory
CVSS 5.9 mediumEPSS 0.41%JFrog
CVE-2026-69105 Potential package cache integrity issue in JFrog Artifactory
CVSS 8.1 highEPSS 0.22%JFrog
CVE-2026-70547 Potential unauthorized metadata exposure in JFrog Artifactory
CVSS 4.3 mediumEPSS 0.28%JFrog
CVE-2026-66016 Rendered Artifactory Helm manifests may contain generated TLS private keys
CVSS 6.7 mediumEPSS 0.12%JFrog
CVE-2026-68759 Integration credential holders may impersonate users in JFrog Access
CVSS 7.2 highEPSS 0.33%JFrog
CVE-2026-68758 Authenticated users may access restricted Artifactory support information
CVSS 6.5 mediumEPSS 0.35%JFrog
CVE-2026-66375 Low-privilege users may remove protected Artifactory metadata
CVSS 8.1 highEPSS 0.40%JFrog
CVE-2026-68757 Potential improper SAML signature verification in JFrog Artifactory
CVSS 7.5 highEPSS 0.26%JFrog
CVE-2026-68756 Potential insecure deserialization in JFrog Artifactory
CVSS 6.6 mediumEPSS 0.47%JFrog
CVE-2026-66382 Authenticated users may write files outside the intended Artifactory work directory
CVSS 4.3 mediumEPSS 0.35%JFrog
CVE-2026-66381 Repository readers may access content outside configured upstream paths
CVSS 5.3 mediumEPSS 0.38%JFrog
CVE-2026-68760 Potential remember-me authentication bypass in JFrog Artifactory
CVSS 5.3 mediumEPSS 0.46%JFrog
CVE-2026-66379 Authenticated users may view private Puppet module metadata
CVSS 4.3 mediumEPSS 0.30%JFrog
CVE-2026-66378 Authenticated users may access private NuGet metadata
CVSS 4.3 mediumEPSS 0.30%JFrog
CVE-2026-66377 Anonymous users may access restricted Artifactory repository information
CVSS 5.3 mediumEPSS 0.36%JFrog
CVE-2026-68755 Bundle writers may alter trusted release information in JFrog Artifactory
CVSS 4.3 mediumEPSS 0.26%JFrog
CVE-2026-66380 Authenticated users may access private OCI referrer metadata
CVSS 4.3 mediumEPSS 0.30%JFrog
CVE-2026-68754 Publishers without delete permission can overwrite docker layer information
CVSS 6.5 mediumEPSS 0.31%JFrog
CVE-2026-66376 Deleted users may temporarily retain access to JFrog Artifactory
CVSS 4.2 mediumEPSS 0.22%JFrog
CVE-2026-68752 Project Resource Managers may escalate privileges in JFrog Artifactory
CVSS 7.2 highEPSS 0.49%JFrog
CVE-2026-18171 Docker Sandboxes read-only runtime mount writable through its shared-export alias
CVSS 5.7 mediumEPSS 0.14%Docker
CVE-2026-18699 Improper Input Validation in MongoDB Query Planner Leads to Denial of Service
CVSS 6.5 mediumEPSS 0.40%MongoDB Atlas
CVE-2026-18700 Use-After-Free in MongoDB Geospatial Validation Leads to Denial of Service
CVSS 6.5 mediumEPSS 0.40%MongoDB Atlas
CVE-2026-18701 Type Confusion in MongoDB Query Subsystem Leads to Denial of Service
CVSS 6.5 mediumEPSS 0.40%MongoDB Atlas
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)