Security Digest
JFrog: known exploited vulnerabilities
4 JFrog CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-09-11 | CVE-2026-42018 | JFrog Artifactory JFrog Artifactory Improper Authentication Vulnerability | 2026-09-25 |
| 2026-09-11 | CVE-2026-42016 | JFrog Artifactory JFrog Artifactory Incorrect Authorization Vulnerability | 2026-09-25 |
| 2026-09-02 | CVE-2026-82329 | JFrog Artifactory JFrog Artifactory Improper Authentication Vulnerability | 2026-09-05 |
| 2026-08-27 | CVE-2026-66384 | JFrog Artifactory JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | 2026-09-10 |