VENDOR

JFrog vulnerabilities: CVEs, exploitation and patches

Every JFrog CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-42016
Artifactory incorrect authorization privilege escalation JFrog Artifactory · Sep 29, 2026
- CISA KEV
- EXPLOITED
- PATCH AVAILABLE
HIGH 8.8
CVE-2026-42018
Artifactory improper authentication returns internal anonymous token JFrog Artifactory · Sep 29, 2026
- CISA KEV
- EXPLOITED
- PATCH AVAILABLE
HIGH 7.5
CVE-2026-82329
Artifactory authentication weakness allows pre-auth admin takeover JFrog Artifactory · Sep 29, 2026
- CISA KEV
- EXPLOITED
- PoC PUBLIC
- PATCH AVAILABLE
CRITICAL 9.8