VULNERABILITY INTELLIGENCE
CVE-2026-69104
CVSS score7.6 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2026-08-25
Last modified2026-08-28
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Description
An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue.
Weakness classification
- reefs@jfrog.com: CWE-862