JFrog

Products

Exploited and recent CVEs

• CVE-2026-82329 Critical 9.8 Exploited Potential authentication bypass leading to administrative access in Artifactory 14.4%
• CVE-2026-42018 High 7.5 Exploited Anonymous user token generation exposure in JFrog Artifactory 10.0%
• CVE-2026-66384 Medium 5.3 Exploited Authenticated users may write data outside the intended Docker cache path 0.7%
• CVE-2026-42016 High 8.1 Exploited Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation 8.6%
• CVE-2026-92892 Critical 9.0 Potential command execution on the host running JFrog CLI. 0.3%
• CVE-2026-70550 Medium 6.5 Potential unauthorized access to private Composer repository metadata in JFrog Artifactory 0.4%
• CVE-2026-70548 Low 3.5 SSRF In CocoaPods Via JFrog Artifactory External Dependency 0.3%
• CVE-2026-69104 High 7.6 Potential unauthorized repository migration in JFrog Artifactory 0.3%
• CVE-2026-70551 High 8.5 Server-Side Request Forgery Via VCS remote download in JFrog Artifactory 0.3%
• CVE-2026-69106 High 8.8 Potential cache poisoning in JFrog Artifactory 0.5%
• CVE-2026-69107 Medium 5.9 Potential unauthorized artifact access in JFrog Artifactory 0.4%
• CVE-2026-69105 High 8.1 Potential package cache integrity issue in JFrog Artifactory 0.2%
• CVE-2026-70547 Medium 4.3 Potential unauthorized metadata exposure in JFrog Artifactory 0.3%
• CVE-2026-66016 Medium 6.7 Rendered Artifactory Helm manifests may contain generated TLS private keys 0.1%
• CVE-2026-68759 High 7.2 Integration credential holders may impersonate users in JFrog Access 0.3%
• CVE-2026-65926 Low 3.1 Private Release Bundle versions may be disclosed under specific configurations 0.2%
• CVE-2026-68758 Medium 6.5 Authenticated users may access restricted Artifactory support information 0.4%
• CVE-2026-66375 High 8.1 Low-privilege users may remove protected Artifactory metadata 0.4%
• CVE-2026-68757 High 7.5 Potential improper SAML signature verification in JFrog Artifactory 0.3%
• CVE-2026-68756 Medium 6.6 Potential insecure deserialization in JFrog Artifactory 0.5%
• CVE-2026-66382 Medium 4.3 Authenticated users may write files outside the intended Artifactory work directory 0.4%
• CVE-2026-66381 Medium 5.3 Repository readers may access content outside configured upstream paths 0.4%
• CVE-2026-68760 Medium 5.3 Potential remember-me authentication bypass in JFrog Artifactory 0.5%
• CVE-2026-66379 Medium 4.3 Authenticated users may view private Puppet module metadata 0.3%
• CVE-2026-66378 Medium 4.3 Authenticated users may access private NuGet metadata 0.3%
• CVE-2026-66377 Medium 5.3 Anonymous users may access restricted Artifactory repository information 0.4%
• CVE-2026-68755 Medium 4.3 Bundle writers may alter trusted release information in JFrog Artifactory 0.3%
• CVE-2026-66380 Medium 4.3 Authenticated users may access private OCI referrer metadata 0.3%
• CVE-2026-68754 Medium 6.5 Publishers without delete permission can overwrite docker layer information 0.3%
• CVE-2026-68753 Medium 5.3 Anonymous users may access restricted Artifactory content under specific configurations 0.3%