[ Vendor · 9 CVEs ]
jfrog
CVEs affecting jfrog published in the last 30 days, plus any jfrog CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-92892 | 13 Oct 2026 | CVSS 9.0 | jfrog-cliPotential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For… | |
| CVE-2026-82329 | 28 Aug 2026 | CVSS 9.8 | JFrog Artifactory Improper AuthenticationJFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to… | Exploited |
| CVE-2026-82329 | 28 Aug 2026 | CVSS 9.8 | JFrog Artifactory Improper AuthenticationJFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to… | Exploited |
| CVE-2026-42018 | 12 Aug 2026 | CVSS 7.5 | JFrog Artifactory Improper AuthenticationJFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing… | Exploited |
| CVE-2026-42018 | 12 Aug 2026 | CVSS 7.5 | JFrog Artifactory Improper AuthenticationJFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing… | Exploited |
| CVE-2026-66384 | 12 Aug 2026 | CVSS 5.3 | JFrog Artifactory Improper Limitation of a Pathname to a Restricted DirectoryAn authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions. | Exploited |
| CVE-2026-66384 | 12 Aug 2026 | CVSS 5.3 | JFrog Artifactory Improper Limitation of a Pathname to a Restricted DirectoryAn authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions. | Exploited |
| CVE-2026-42016 | 27 Jul 2026 | CVSS 8.8 | JFrog Artifactory Incorrect AuthorizationJFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token… | Exploited |
| CVE-2026-42016 | 27 Jul 2026 | CVSS 8.8 | JFrog Artifactory Incorrect AuthorizationJFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token… | Exploited |