{"generated_at":"2026-10-23T14:09:07.618Z","count":1,"incidents":[{"id":"jfrog-artifactory-improper-limitation-of-a-pathname-to-a-cve-2026-66384","url":"https://pwned.coffee/i/jfrog-artifactory-improper-limitation-of-a-pathname-to-a-cve-2026-66384","title":"JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability","summary":"JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions. Added to CISA KEV on 2026-08-27 (federal deadline 2026-09-10).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"JFrog Artifactory","fixed_versions":[],"ids":["CVE-2026-66384"],"stack":["docker","ci"],"first_seen":"2026-08-27T12:00:00.000Z","updated_at":"2026-08-27T12:00:00.000Z"}]}