Vulnerabilities

JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with…

JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Sonatype / JFrog

Product

Java libraries / app servers, Nexus Repository / Artifactory

CVSS

9.8

CISA KEV

listed

Exploitation

observed in the wild

Fix

available

Exposure class

Web platform, Developer platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-82329 on this site · NVD · CVE.org · Vulnpedia · KEV

Other items that share a CVE or were clustered with this one.

1. 44
   Wiz Research Wiz 10 Sep 2026

   Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329

   Exploited CVE-2026-42016CVE-2026-42018CVE-2026-82329+1 more Sonatype / JFrog
2. 16
   Research Check Point Research 7 Sep 2026

   7th September – Threat Intelligence Report

   CVE-2026-83548CVE-2026-83549CVE-2026-82329
3. 46
   CISA advisory CISA 2 Sep 2026

   CISA Adds Seven Known Exploited Vulnerabilities to Catalog

   Exploited CVE-2026-9586CVE-2026-48710CVE-2026-49869+4 more
4. 66
   KEV NVD 12 Aug 2026

   JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller…

   KEV CVSS 7.5 Fix available CVE-2026-42018 Sonatype / JFrog