SPOJENO AI KEV ✓ EPSS 0.08
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. [...]
JFrog US CA FR
CVE v události 5
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-69104 | 7.6 3.1 · JFROG | – | 0.00 |
| CVE-2026-70548 | 3.5 3.1 · JFROG | – | 0.00 |
| CVE-2026-70550 | 6.5 3.1 · JFROG | – | 0.00 |
| CVE-2026-70551 | 8.5 3.1 · JFROG | – | 0.00 |
| CVE-2026-82329 | 9.8 3.1 · JFROG | KEV ✓ | 0.08 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.
Jak se o tom psalo 4
-
· BleepingComputer US nadpis události
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. [...]
-
· CISA KEV US
JFrog Artifactory Improper Authentication Vulnerability (CVE-2026-82329)
CISA added CVE-2026-82329 to the Known Exploited Vulnerabilities catalog. Affected product: JFrog Artifactory. Remediation due date: 2026-09-05.
-
· Cyber Centre Kanada CA
JFrog security advisory (AV26-867)
Serial number: AV26-867Date: September 1, 2026 As of August 28, 2026, JFrog is affected by a vulnerability in the following product: Artifactory Prior to 7.111.21 Prior to 7.117.28 Prior to 7.125.20 Prior to 7.133.29 Prior to 7.146.38 Prior to 7.161.20 Open-source reporting indicates that CVE-2026-82329 related to JFrog Artifactory is being exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become…
-
· CERT-FR – avis FR
Multiples vulnérabilités dans JFrog Artifactory (01 septembre 2026)
De multiples vulnérabilités ont été découvertes dans JFrog Artifactory. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une falsification de requêtes côté serveur (SSRF) et un contournement de la politique de sécurité.