JFrog

Attackers are actively exploiting a chain of three critical vulnerabilities (CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329) in JFrog Artifactory to bypass authentication and achieve full administrative control.

JFrog Artifactory suffers from a path traversal vulnerability that allows an authenticated user to write files to unauthorized locations on the server by manipulating remote-repository configurations.

JFrog Artifactory is affected by multiple vulnerabilities enabling authentication bypass, privilege escalation, user impersonation, and unauthorized data manipulation or disclosure.

Tracking brief for the Shai-Hulud campaign; individual sightings are folded in as reported.