CVE-2026-70548
SSRF In CocoaPods Via JFrog Artifactory External Dependency
CVSS score
3.5
EPSS probability
%0.3
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-82329 Actively exploited
Potential authentication bypass leading to administrative access in Artifactory
J
Patch status unknown Public Exploits:6EPSS %14
7.5
CVE-2026-42018 Actively exploited
Anonymous user token generation exposure in JFrog Artifactory
J
Workaround Public Exploits:2EPSS %10
8.1
CVE-2026-42016 Actively exploited
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
J
WorkaroundEPSS %9
8.1
CVE-2024-34394
libxmljs2 namespaces type confusion RCE
J
Patch status unknownEPSS %1
8.1
CVE-2024-34393
libxmljs2 attrs type confusion RCE
J
Patch status unknownEPSS %1
5.3
CVE-2026-66384 Actively exploited
Authenticated users may write data outside the intended Docker cache path
J
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-70548"