vulnerability
More JFrog Artifactory bugs under attack, and all 3 have patches
Multiple attackers are actively exploiting three recently patched vulnerabilities in JFrog Artifactory, gaining administrative control over vulnerable instances and subsequently installing malicious plugins and backdoors. The affected party, JFrog, has not publicly commented on these attacks, but security researchers have confirmed in-the-wild exploitation across various environments.
CVE-2026-82329critical
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Threat actors are actively exploiting a recently disclosed critical security flaw in JFrog Artifactory, according to a report from watchTowr. The vulnerability, identified as CVE-2026-82329 with a CVSS score of 9.8, is an authentication bypass issue that could allow attackers to gain administrative access to Artifactory instances. This exploitation is occurring mere days after the public…
vulnerability
JFrog Artifactory Flaws Enable Software Supply Chain Attacks
Two vulnerabilities in JFrog Artifactory have been identified that could enable anonymous or low-privileged users to manipulate package metadata without altering the underlying artifacts, potentially leading to software supply chain compromises. The flaws, reported by Oligo Security to JFrog on June 25 and publicly detailed on August 20, have since been patched by JFrog.
