Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*

2 briefs RSS
critical threat

Active Exploitation of JFrog Artifactory Vulnerabilities

Attackers are actively exploiting a chain of three critical vulnerabilities (CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329) in JFrog Artifactory to bypass authentication and achieve full administrative control.

exploited Artifactory supply-chain vulnerability authentication-bypass
3t 3c
low advisory

CVE-2026-66384 - Improper Path Limitation in JFrog Artifactory

JFrog Artifactory suffers from a path traversal vulnerability that allows an authenticated user to write files to unauthorized locations on the server by manipulating remote-repository configurations.

Artifactory vulnerability path-traversal cisa-kev jfrog
1t 1c