Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

4 result(s)

Export this search: RSS · CSV · STIX

CVE-2026-82329 Critical · 9.8 KEV Urgent · 72 Public exploit CWE-287 Aug 28, 2026

JFrog Artifactory Improper Authentication Vulnerability

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

CVE-2026-42018 High · 7.5 KEV High · 62 Public exploit CWE-287 Aug 12, 2026

JFrog Artifactory Improper Authentication Vulnerability

JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.

CVE-2026-66384 Medium · 5.3 KEV High · 52 Public exploit CWE-22 Aug 12, 2026

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

CVE-2026-42016 High · 8.8 KEV High · 55 CWE-863 Jul 27, 2026

JFrog Artifactory Incorrect Authorization Vulnerability

JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.