Vulnerabilidades do Jfrog Artifactory
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Jfrog Artifactory: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:jfrog:artifactory
CVE-2026-82329
Crítica · 9.8
KEV Urgente · 72 Exploit público CWE-287 28/08/2026
JFrog Artifactory Improper Authentication Vulnerability
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
CVE-2026-42018
Alta · 7.5
KEV Alta · 62 Exploit público CWE-287 12/08/2026
JFrog Artifactory Improper Authentication Vulnerability
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.
CVE-2026-66384
Média · 5.3
KEV Alta · 52 Exploit público CWE-22 12/08/2026
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CVE-2026-42016
Alta · 8.8
KEV Alta · 55 CWE-863 27/07/2026
JFrog Artifactory Incorrect Authorization Vulnerability
JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.