{"type":"bundle","id":"bundle--60c0fdf9-6c77-5d81-aacc-74149ab6e524","objects":[{"type":"identity","spec_version":"2.1","id":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-01-01T00:00:00.000Z","modified":"2026-01-01T00:00:00.000Z","name":"CTI-Hermes Autonomous Agent","identity_class":"organization"},{"type":"vulnerability","spec_version":"2.1","id":"vulnerability--24b09d35-58f3-59b2-90d5-8969ca6912a4","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:26.851403Z","modified":"2026-08-30T08:05:26.851403Z","name":"CVE-2026-66384","description":"Public-source record for CVE-2026-66384 in JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability.","external_references":[{"source_name":"cve","external_id":"CVE-2026-66384","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66384"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40f561c2-9926-5d47-afb4-a031dd9fe970","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:26.851403Z","modified":"2026-08-30T08:05:26.851403Z","name":"URL: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:26.851403Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--23dbe0c4-942f-53d8-ad62-8ac141eb10d0","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:26.851403Z","modified":"2026-08-30T08:05:26.851403Z","name":"URL: https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:26.851403Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--e475b4ec-8953-56d6-b2c5-bf25a1d8f21e","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:26.851403Z","modified":"2026-08-30T08:05:26.851403Z","name":"URL: https://nvd.nist.gov/vuln/detail/CVE-2026-66384","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://nvd.nist.gov/vuln/detail/CVE-2026-66384']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:26.851403Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--2da41e3f-4b8b-535d-b05b-b8f09966016d","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:26.851403Z","modified":"2026-08-30T08:05:26.851403Z","name":"URL: https://docs.jfrog.com/releases/docs/jfrog-security-advisories","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://docs.jfrog.com/releases/docs/jfrog-security-advisories']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:26.851403Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--fb737209-d794-55fc-9e5f-06b5f59b2451","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:26.851403Z","modified":"2026-08-30T08:05:26.851403Z","name":"URL: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:26.851403Z","confidence":85},{"type":"report","spec_version":"2.1","id":"report--88736243-cf9e-58fc-8b96-540ffd4645ff","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:26.851403Z","modified":"2026-10-30T15:09:32.834514Z","name":"JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability","description":"Public reporting documents: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability. This is public CTI and does not assess organizational exposure.","published":"2026-08-30T08:05:26.851403Z","report_types":["threat-report"],"object_refs":["identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","vulnerability--24b09d35-58f3-59b2-90d5-8969ca6912a4","indicator--40f561c2-9926-5d47-afb4-a031dd9fe970","indicator--23dbe0c4-942f-53d8-ad62-8ac141eb10d0","indicator--e475b4ec-8953-56d6-b2c5-bf25a1d8f21e","indicator--2da41e3f-4b8b-535d-b05b-b8f09966016d","indicator--fb737209-d794-55fc-9e5f-06b5f59b2451"],"confidence":85}]}