CVE-2026-70551

HighCVSS 8.5/10Last modified Aug 28, 2026

Description

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL.

Metrics

CVSS 3.1 8.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Weakness enumeration

CWE-918

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
jfrogartifactory>= 7.161.0, < 7.161.19; >= 7.146.0, < 7.146.36

References

Timeline

Published
Aug 25, 2026
Last modified
Aug 28, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-705529.8MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX dispatcher that allows unauthenticated attackers tCVE-2026-705539.8MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arbitrary PHP code into the appliCVE-2026-705549.8MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by passing attackeCVE-2026-705556.5rConfig Core 8.2.3 before 8.2.13 contains an information disclosure vulnerability that allows authenticated users to retrieve cleartext SSH,CVE-2026-705564.3Hubzilla versions prior to 11.4 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\MoCVE-2026-705576.5diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField column of any entity and returCVE-2026-705589.8Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and file.transferTo(CVE-2026-705597.5Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation that short-circuits tCVE-2026-70568.8A vulnerability was detected in Tenda F456 1.0.0.5. Impacted is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter of the compCVE-2026-705605.4Ultimate POS (Stock Management & Point of Sale) contains a stored cross-site scripting vulnerability that allows low-privileged authenticateCVE-2026-705616.5TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows any authenticated user, including low-priviCVE-2026-705627.0Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70551: High severity, CVSS 8.5 | Vulnix