EUVD Vulnerability Catalog Actively Exploited (KEV)

EUVD-2026-57256

Severity: MEDIUM Base Score: 5.3 CVSS Version: 3.1

Vulnerability Description

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

▪ Attack Vector (AV): Network

▪ Attack Complexity (AC): High

▪ Privileges Required (PR): Low

▪ User Interaction (UI): None

▪ Scope (S): Unchanged

▪ Confidentiality Impact (C): None

▪ Integrity Impact (I): High

▪ Availability Impact (A): None

Vendor JFrog

Database Authority

European Union Agency for Cybersecurity (ENISA) EUVD

Assigner

JFROG

EPSS Probability

0.26

Known Aliases

GHSA-g2mp-x73p-93xc CVE-2026-66384

Published On

2026-08-12

Last Updated

2026-08-12

Exploited Since

2026-08-27