Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329
Wiz Research has identified active, in-the-wild exploitation of three critical and high-severity vulnerabilities impacting JFrog Artifactory (CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329). Attackers are chaining these vulnerabilities to bypass authentication and gain administrative control.
- Vendor
- Sonatype / JFrog
- Product
- Java libraries / app servers, Nexus Repository / Artifactory
- Exploitation
- observed in the wild
- Exposure class
- Web platform, Developer platform
Why it ranks 44 (Notable)
- Exploitation observed in the wild
- Product class: web platform, developer platform
- Covered by 5 independent sources
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Wiz Research (wiz.io)
- CVE-2026-42016 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-42018 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-82329 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-4201 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.