---
title: "JFrog: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/jfrog/
description: "Every JFrog vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (4), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-09-11
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# JFrog: known exploited vulnerabilities

- 2026-09-11 [CVE-2026-42018](https://erroneo.us/security/cve/CVE-2026-42018/index.md) JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability (due 2026-09-25; ransomware: Unknown)
- 2026-09-11 [CVE-2026-42016](https://erroneo.us/security/cve/CVE-2026-42016/index.md) JFrog Artifactory: JFrog Artifactory Incorrect Authorization Vulnerability (due 2026-09-25; ransomware: Unknown)
- 2026-09-02 [CVE-2026-82329](https://erroneo.us/security/cve/CVE-2026-82329/index.md) JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability (due 2026-09-05; ransomware: Unknown)
- 2026-08-27 [CVE-2026-66384](https://erroneo.us/security/cve/CVE-2026-66384/index.md) JFrog Artifactory: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability (due 2026-09-10; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/jfrog/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt